CVE-2026-113470

Published: Ott 20, 2026 Last Modified: Ott 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: none

Description

AI Translation Available

Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if RemoteSettings is disabled by policy or otherwise unavailable in the user's network environment. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, and Thunderbird 153.5.1.

295

Improper Certificate Validation

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Authentication
Potential Impacts:
Bypass Protection Mechanism Gain Privileges Or Assume Identity
Applicable Platforms
Technologies: Not Technology-Specific, Web Based, Mobile
View CWE Details
http://www.openwall.com/lists/oss-security/2026/10/20/30
http://www.openwall.com/lists/oss-security/2026/10/20/30
https://bugzilla.mozilla.org/show_bug.cgi?id=2083382
https://bugzilla.mozilla.org/show_bug.cgi?id=2083382
https://www.mozilla.org/security/advisories/mfsa2026-111/
https://www.mozilla.org/security/advisories/mfsa2026-111/
https://www.mozilla.org/security/advisories/mfsa2026-112/
https://www.mozilla.org/security/advisories/mfsa2026-112/
https://www.mozilla.org/security/advisories/mfsa2026-113/
https://www.mozilla.org/security/advisories/mfsa2026-113/
https://www.mozilla.org/security/advisories/mfsa2026-114/
https://www.mozilla.org/security/advisories/mfsa2026-114/
https://www.mozilla.org/security/advisories/mfsa2026-115/
https://www.mozilla.org/security/advisories/mfsa2026-115/