Search CVEs, research… / diras.sa

CVE-2026-92075: mitigation bypass in Mozilla Firefox

Remote attackers can bypass networking mitigations in Mozilla Firefox, potentially allowing high-impact compromise of confidentiality and integrity; this is tracked as CVE-2026-92075. The provided data does not list specific affected Firefox versions; the vulnerability has a critical CVSS 3.1 score and requires only network access (no privileges or user interaction reported in the data).

Published Updated Source: CVE Program, NVD, FIRST EPSS

CVSS 3.1
9.1CRITICAL
EPSS
0.00354
CWE
CWE-693
KEV DUE DATE
Not listed
PATCH
Not yet

DIRAS TAKE

Treat this as high priority: the flaw is remotely exploitable with no privileges or UI required and there is no patch listed in the provided data, so restrict exposure and prepare to apply vendor updates immediately when released.

What is CVE-2026-92075?

Remote attackers can bypass networking mitigations in Mozilla Firefox, potentially allowing high-impact compromise of confidentiality and integrity; this is tracked as CVE-2026-92075. The provided data does not list specific affected Firefox versions; the vulnerability has a critical CVSS 3.1 score and requires only network access (no privileges or user interaction reported in the data).

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Which versions of Mozilla Firefox are affected?

BRANCHAFFECTEDFIXED

Is CVE-2026-92075 being exploited?

There are no public reports of exploitation as of 2026-09-30.

How to fix CVE-2026-92075

  1. Restrict Firefox network exposure by blocking unnecessary inbound and outbound access at network edges and proxies.
  2. Harden endpoints that run Firefox: enforce least privilege, disable unnecessary features, and use up-to-date isolation policies.
  3. Monitor browser logs and network traffic for unusual connections and signs of compromise related to Firefox networking.
  4. Apply Mozilla's official updates or mitigations as soon as the vendor publishes a patch or guidance.

Frequently asked questions

Is CVE-2026-92075 being actively exploited?

There are no public reports of exploitation of CVE-2026-92075 as of 2026-09-30.

Which Firefox versions are affected by CVE-2026-92075?

The provided data does not specify which Firefox versions are affected; consult Mozilla advisories for exact version information.

Is there a patch for CVE-2026-92075?

No patch is listed in the provided data; monitor Mozilla's security announcements and apply updates when they are released.

Does CVE-2026-92075 require authentication?

According to the supplied vulnerability metrics, the issue does not require privileges or user interaction, so authentication is not required.

References