CVE-2026-8971

MEDIUM NVD

CVSS Score 6.5

Severity MEDIUM

Published May 19, 2026

Vendor unknown

Description

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151.