Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-25 | 2 | Disclosure2 |
| 2026-03-01 | 1 | Disclosure1 |
| 2026-04-16 | 1 | Patch1 |
Gitea ghost user (UserID -1) pulls every private container. Middleware never checked package owner. CVE-2026-2777: ReqContainerAccess only tests RequireSignInViewStrict. Ghost sessions enumerate repos, tags, manifests, and layers. Scan + pull PoC is public! Fixed in 1.26.2 https://github.com/portbuster1337/CVE-2026-27771 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #AppSec #SupplyChain #AuthBypass
🚨 CRITICAL: CVE-2026-2777 (CVSS 9.8) - Privilege escalation in Firefox/Thunderbird Messaging System. Network exploitable, no user interaction required. Patched in Firefox 148, ESR 115.33/140.8, Thunderbird 148/140.8. Update immediately. #CVE #PatchNow https://t.co/gz2YuP1RpX
Post summary
The tweet announces a critical privilege‑escalation flaw CVE‑2026‑2777 in Firefox/Thunderbird that is network‑exploitable and has been patched in recent releases; users are urged to update immediately.
CVE-2026-2777 (CVSS:9.8, CRITICAL) is Modified. Privilege escalation in the Messaging System component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, ..https://nvd.nist.gov/vuln/detail/CVE-2026-2777 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-2777, a critical privilege escalation flaw in Firefox’s Messaging System, affecting versions below 148 and ESR below 115.33, with a CVSS score of 9.8.
🚨*CVE* CVE-2026-2777 Privilege escalation in the Messaging System component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. https://www.cve.org/CVERecord?id=CVE-2026-2777 ----- Traducción: CVE-2026-2777 Elevación de privilegios en e… http://infoflow.cloud`
Post summary
The post announces CVE-2026-2777, a privilege escalation vulnerability in Firefox’s Messaging System component affecting versions below 148 and ESR versions below 115.33 and 140.8.
CVE-2026-2777 Privilege escalation in the Messaging System component. This vulnerability affects Firefox < 148, Firefox ESR < 115.33, and Firefox ESR < 140.8. https://www.cve.org/CVERecord?id=CVE-2026-2777
Post summary
A privilege escalation vulnerability (CVE-2026-2777) in Firefox’s Messaging System component affects versions below 148 and certain ESR releases.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |
| App | mozilla | thunderbird | - | - | - |