CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

• https://bugzilla.mozilla.org/show_bug.cgi?id=2079938
• https://www.mozilla.org/security/advisories/mfsa2026-111/
• https://www.mozilla.org/security/advisories/mfsa2026-114/

Published

Oct 20, 2026

Last Modified

Oct 20, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-113392A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revis…7.4
• CVE-2026-113393A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 …6.3
• CVE-2026-113394A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 …7.4
• CVE-2026-113395A security flaw has been discovered in DrayTek Vigor2960 1.5…7.4
• CVE-2026-113396A weakness has been identified in DrayTek Vigor2960 1.5.1.6 …7.4
• CVE-2026-113397A security vulnerability has been detected in DrayTek Vigor2…7.4
• CVE-2026-1134A vulnerability was identified in itsourcecode Society Manag…6.1
• CVE-2026-11340Missing Authorization vulnerability in HAVELSAN Inc. Liman M…8.3
• CVE-2026-113400Uninitialized memory in the Audio/Video: cubeb component. Th…5.4
• CVE-2026-113401Denial-of-service in the PDF Viewer component. This vulnerab…6.5
• CVE-2026-113402ArmorX Spam developed by ArmorX Global Technology has a Loca…6.5
• CVE-2026-113403ArmorX Spam developed by ArmorX Global Technology has a Comm…6.5