Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨*CVE* CVE-2026-8950 Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. https://www.cve.org/CVERecord?id=CVE-2026-8950 ----- Traducción: CVE-2026-8950 Omisión… http://infoflow.cloud`
Post summary
A same-origin policy bypass (CVE-2026-8950) has been identified and patched in several Firefox and Thunderbird releases.
CVE-2026-8950 Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. https://www.cve.org/CVERecord?id=CVE-2026-8950
Post summary
CVE-2026-8950 is a same‑origin policy bypass affecting the Networking: HTTP component, and it has already been addressed by patches in specific Firefox and Thunderbird releases.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |
| App | mozilla | thunderbird | - | - | - |