CVE-2026-109782

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-03: 111-03
Referenced assets1 URL
Full discourse1 post
  • d7mee@d7meeAz

    نشرت رايت اب لثغرة في متصفح Firefox ملف searchConnector-ms. ما كان موجود في قائمة الملفات الخطيرة sExecutableExts, الثغرة تسمح بسرقة NTLM Hash للمستخدم عن طريق ملف XML بسيط CVE-2026-109782 رابط الرايت اب: https://medium.com/@d7meealz/cve-2026-109782-how-a-missing-file-extension-broke-firefoxs-download-protection-b3924d4c3e26

    20044490
    457 followersView on X

Explore more