CVE-2026-2801 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Affected Products (NVD)

Vendor	Product	Version
mozilla	firefox	𝑥 < 148.0
mozilla	thunderbird	𝑥 < 148.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

sid	149.0.2-1 fixed

Common Weakness Enumeration

CWE-754 - Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.

Vulnerability Media Exposure

[GERMAN] Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen, einen Denial-of-Service-Zustand herbeizuführen, sensible Informationen offenzulegen, Spoofing-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder andere nicht spezifizierte Angriffe durchzuführen.
Published: 2026-02-24T23:00:00+00:00

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2009901

https://www.mozilla.org/security/advisories/mfsa2026-13/

https://www.mozilla.org/security/advisories/mfsa2026-16/