Critical severity9.8NVD Advisory· Published May 7, 2026· Updated Jul 28, 2026

CVE-2026-8094

Description

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.

LLM-synthesized narrative grounded in this CVE's description and references.

Mozilla Corporation/Firefox2 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*range: <140.10.2
- (no CPE)range: 140.10.2
Mozilla Corporation/Thunderbird2 versions
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*range: <140.10.2
- (no CPE)range: 140.10.2
osv-coords8 versions
pkg:apk/chainguard/firefox pkg:apk/chainguard/firefox-esr pkg:apk/wolfi/firefox pkg:rpm/almalinux/firefox pkg:rpm/almalinux/firefox-x11 pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed
< 140.10.2-r0+ 7 more
- (no CPE)range: < 140.10.2-r0
- (no CPE)range: < 140.10.2-r0
- (no CPE)range: < 140.10.2-r0
- (no CPE)range: < 140.10.2-1.el10_2
- (no CPE)range: < 140.10.2-1.el9_8
- (no CPE)range: < 140.12.0-bp160.1.1
- (no CPE)range: < 140.10.2-1.1
- (no CPE)range: < 140.10.2-1.1