LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-6768 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 22, 2026

Firefox - Mitigation Bypass

Published: April 21, 2026Updated: April 22, 2026Remote Exploitable

Overview

Firefox contains a mitigation bypass caused by flaws in the Networking: Cookies component, letting attackers bypass security mitigations, exploit requires no special conditions.

Severity & Score

Severity: Critical
CVSS Score: 9.8

Impact

Attackers can bypass security mitigations, potentially leading to further exploitation or information disclosure.

Mitigation

Update to Firefox 150 or later.

Details

CVE ID
CVE-2026-6768
Severity
Critical
CVSS Score
9.8
Type
undefined
Status
unconfirmed

CWE

  • CWE-288

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H