PT-2026-21733 · Mozilla · Firefox+1

Hafiizh + 1 · Publicado 2026-02-24 · Atualizado 2026-03-01 · CVE-2026-2800

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148

Description A spoofing issue exists in the WebAuthn component in Firefox for Android. This issue affects Firefox and Thunderbird.

Recommendations Update Firefox to version 148 or later. Update Thunderbird to version 148 or later.

Correção

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

CVE-2026-2800

OPENSUSE-SU-2026:10257-1

Produtos afetados

Firefox

Thunderbird

Referências · 64

• https://suse.com/security/cve/CVE-2026-2786 · Nota
• https://suse.com/security/cve/CVE-2026-2759 · Nota
• https://suse.com/security/cve/CVE-2026-2790 · Nota
• https://suse.com/security/cve/CVE-2026-2760 · Nota
• https://suse.com/security/cve/CVE-2026-2795 · Nota
• https://suse.com/security/cve/CVE-2026-2766 · Nota
• https://suse.com/security/cve/CVE-2026-2775 · Nota
• https://suse.com/security/cve/CVE-2026-2803 · Nota
• https://suse.com/security/cve/CVE-2026-2806 · Nota
• https://suse.com/security/cve/CVE-2026-2796 · Nota
• https://osv.dev/vulnerability/CVE-2026-2800 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-2800 · Nota
• https://suse.com/security/cve/CVE-2026-2799 · Nota
• https://suse.com/security/cve/CVE-2026-2763 · Nota
• https://suse.com/security/cve/CVE-2026-2798 · Nota