CVE-2026-16404

HIGH7.4Auth bypass

JSON export Create alert

Description

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

Affected products

Mozilla / Firefox153 – *
Mozilla / firefox_mobile153.0

References

MISChttps://bugzilla.mozilla.org/show_bug.cgi?id=2020253
VENDOR_ADVISORYhttps://www.mozilla.org/security/advisories/mfsa2026-68/

Updated 35m ago · 8 sources