CVE-2026-92038

Description

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

Affected Platforms

Weakness Type

Unknown

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=2068952
• https://www.mozilla.org/security/advisories/mfsa2026-90/
• https://www.mozilla.org/security/advisories/mfsa2026-93/
• https://www.mozilla.org/security/advisories/mfsa2026-94/
• https://www.mozilla.org/security/advisories/mfsa2026-96/