PT-2026-57854 · Mozilla · Firefox For Ios

Muneaki Nishimura · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-14906

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 152.4

Description Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the application sandbox.

Recommendations Update Firefox for iOS to version 152.4.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-14906

Affected Products

Firefox For Ios

References · 6

• https://mozilla.org/security/advisories/mfsa2026-66 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-14906 · Security Note
• https://twitter.com/CVEnew/status/2076767969070436549 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2076775567257452560 · Twitter Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=2045842 · Note
• https://twitter.com/infoflowcloud/status/2076770270560268558 · Twitter Post