CVE-2026-8094: Other issue in the WebRTC component
Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.10.2 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.10.2 - Upgrade
Upgrade
Thunderbird 140.10.2to a version that resolves this vulnerability.Fixed in 140.10.2
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-8094?
CVE-2026-8094 is classified as a moderate vulnerability affecting the WebRTC component.
How do I fix CVE-2026-8094?
To address CVE-2026-8094, update to Mozilla Firefox ESR version 140.10.2 or Thunderbird version 140.10.2.
What software is affected by CVE-2026-8094?
CVE-2026-8094 affects Mozilla Firefox ESR versions prior to 140.10.2 and Mozilla Thunderbird versions prior to 140.10.2.
When was CVE-2026-8094 remediated?
CVE-2026-8094 was remediated in Mozilla Firefox ESR and Thunderbird versions released on or after 140.10.2.
What component is impacted by CVE-2026-8094?
CVE-2026-8094 impacts the WebRTC component, which is used for real-time communication in browsers.