CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

Vulnerability in Mozilla Firefox for Android (August 5, 2026)

unknownCVE-2026-18809
A vulnerability has been discovered in Mozilla Firefox for Android. It allows an attacker to cause a breach of data confidentiality.

CSIRTS triage

What
An information disclosure vulnerability exists in Mozilla Firefox for Android.
Who is affected
Firefox for Android users are affected by CVE-2026-18809.
Urgency
Information disclosure poses privacy risk; update should be applied in normal maintenance cycle.
Action
Update Mozilla Firefox for Android to the patched version addressing CVE-2026-18809.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Firefox for Android

Get an email when a new Firefox for Android advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-FR Avis de sécurité (FR · national-cert · site)
Severity
unknown
Published
2026-08-05
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0971/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-18809coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Mozilla Firefox for

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-FR Avis de sécurité