CVE-2026-2800: Spoofing issue in the WebAuthn component in Firefox for Android

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 148
2. Upgrade

   Upgrade Firefox for Android to a version that resolves this vulnerability.

   Fixed in 148
3. Upgrade

   Upgrade Thunderbird to a version that resolves this vulnerability.

   Fixed in 148

Event History

Parent advisories

This vulnerability appears in the following advisories.

• MFSA2026-16
• MFSA2026-13

Peer vulnerabilities

Found alongside the following vulnerabilities.

• CVE-2026-2757
• CVE-2026-2758
• CVE-2026-2759
• CVE-2026-2795
• CVE-2026-2760
• CVE-2026-2761
• CVE-2026-2762
• CVE-2026-2763
• CVE-2026-2764
• CVE-2026-2796
• CVE-2026-2797
• CVE-2026-2765
• CVE-2026-2766
• CVE-2026-2767
• CVE-2026-2768
• CVE-2026-2798
• CVE-2026-2769
• CVE-2026-2799
• CVE-2026-2770
• CVE-2026-2771
• CVE-2026-2772
• CVE-2026-2773
• CVE-2026-2774
• CVE-2026-2775
• CVE-2026-2776
• CVE-2026-2777
• CVE-2026-2778
• CVE-2026-2779
• CVE-2026-2800
• CVE-2026-2780
• CVE-2026-2781
• CVE-2026-2801
• CVE-2026-2782
• CVE-2026-2783
• CVE-2026-2802
• CVE-2026-2803
• CVE-2026-2784
• CVE-2026-2785
• CVE-2026-2804
• CVE-2026-2786
• CVE-2026-2805
• CVE-2026-2787
• CVE-2026-2788
• CVE-2026-2789
• CVE-2026-2806
• CVE-2026-2790
• CVE-2026-2791
• CVE-2026-2807
• CVE-2026-2792
• CVE-2026-2793
• CVE-2026-2794

Frequently Asked Questions