Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-24 | 1 | Disclosure1 |
| 2026-04-17 | 1 | Patch1 |
CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9. https://www.cve.org/CVERecord?id=CVE-2026-4704
Post summary
A denial‑of‑service vulnerability (CVE‑2026‑4704) in Firefox’s WebRTC signaling component is disclosed, affecting versions below 149 and ESR 140.9, with no exploitation or patch information provided.
🚨 HIGH: CVE-2026-4704 (CVSS 7.5) - DoS vulnerability in WebRTC Signaling affects Firefox & Thunderbird. Patch immediately to Firefox 149/ESR 140.9 or Thunderbird 149/140.9. #CVE #PatchNow https://t.co/vv3EEGmn9s
Post summary
The tweet announces CVE‑2026‑4704, a DoS flaw in WebRTC Signaling affecting Firefox and Thunderbird, and urges users to apply the specified patches.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |