PT-2026-21733 · Mozilla · Thunderbird+1

Hafiizh + 1 · CVE-2026-2800 · Publicado 2026-02-24 · Atualizado 2026-07-25

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do Firefox anteriores a 148 Versões do Thunderbird anteriores a 148

Descrição Existe um problema de spoofing no componente WebAuthn do Firefox para Android. Este problema afeta o Firefox e o Thunderbird.

Recomendações Atualize o Firefox para a versão 148 ou posterior. Atualize o Thunderbird para a versão 148 ou posterior.

Correção

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

CVE-2026-2800

OPENSUSE-SU-2026:10257-1

OPENSUSE-SU-2026:11373-1

Produtos afetados

Firefox

Thunderbird

Referências · 279

• https://suse.com/security/cve/CVE-2026-2789 · Nota
• https://suse.com/security/cve/CVE-2025-9187 · Nota
• https://suse.com/security/cve/CVE-2026-8969 · Nota
• https://suse.com/security/cve/CVE-2026-0881 · Nota
• https://suse.com/security/cve/CVE-2026-0889 · Nota
• https://suse.com/security/cve/CVE-2024-9403 · Nota
• https://suse.com/security/cve/CVE-2026-6783 · Nota
• https://suse.com/security/cve/CVE-2025-13022 · Nota
• https://suse.com/security/cve/CVE-2026-6757 · Nota
• https://suse.com/security/cve/CVE-2025-11717 · Nota
• https://suse.com/security/cve/CVE-2025-13021 · Nota
• https://suse.com/security/cve/CVE-2026-4725 · Nota
• https://suse.com/security/cve/CVE-2025-14861 · Nota
• https://suse.com/security/cve/CVE-2026-6763 · Nota
• https://suse.com/security/cve/CVE-2026-2771 · Nota