Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-4718 WebRTC Signaling Component Vulnerability in Firefox Versions Below 149 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4718
Post summary
A new WebRTC signaling component vulnerability (CVE-2026-4718) affecting Firefox versions below 149 has been disclosed, with details available via the provided link.
CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149 and Firefox ESR < 140.9. https://www.cve.org/CVERecord?id=CVE-2026-4718
Post summary
A new undefined behavior vulnerability (CVE-2026-4718) in Firefox’s WebRTC signaling component affecting versions below 149 and ESR below 140.9 has been disclosed.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |
| App | mozilla | thunderbird | - | - | - |