CVE-2026-8094

high

Description

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.

References

https://www.mozilla.org/security/advisories/mfsa2026-44/

https://www.mozilla.org/security/advisories/mfsa2026-41/

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8094.json

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28365

https://bugzilla.redhat.com/show_bug.cgi?id=2467706

https://bugzilla.mozilla.org/show_bug.cgi?id=2035939

https://access.redhat.com/security/cve/CVE-2026-8094

https://access.redhat.com/errata/RHSA-2026:26539

https://access.redhat.com/errata/RHSA-2026:26536

https://access.redhat.com/errata/RHSA-2026:26521

https://access.redhat.com/errata/RHSA-2026:26270

https://access.redhat.com/errata/RHSA-2026:26269

https://access.redhat.com/errata/RHSA-2026:26268

https://access.redhat.com/errata/RHSA-2026:26174

https://access.redhat.com/errata/RHSA-2026:25015

https://access.redhat.com/errata/RHSA-2026:24983

https://access.redhat.com/errata/RHSA-2026:24755

https://access.redhat.com/errata/RHSA-2026:24516

https://access.redhat.com/errata/RHSA-2026:24511

https://access.redhat.com/errata/RHSA-2026:24510

https://access.redhat.com/errata/RHSA-2026:24509

https://access.redhat.com/errata/RHSA-2026:24508

https://access.redhat.com/errata/RHSA-2026:22643

https://access.redhat.com/errata/RHSA-2026:22325

https://access.redhat.com/errata/RHSA-2026:21381

https://access.redhat.com/errata/RHSA-2026:20574

https://access.redhat.com/errata/RHSA-2026:20566

https://access.redhat.com/errata/RHSA-2026:19160

Details

Source: Mitre, NVD

Published: 2026-05-07

Updated: 2026-07-28

Named Vulnerability: GHSA-5ghx-9783-29rc

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00628