Security Advisory

CVE-2026-8971

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-05-19 12:30:18

Last updated 2026-05-19 17:10:55

Assigner mozilla

State PUBLISHED

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.