Question 1

What is CVE-2026-109766 — CVE-2026-109766?

Accepted Answer

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Question 2

What is the authoritative source for CVE-2026-109766?

Accepted Answer

CVE-2026-109766 (CVE-2026-109766) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.17% probability of exploitation · percentile 5.5% · 2026-10-17T12:00:28Z
Last modified	2026-10-13

CVE-2026-109766CVE-2026-109766

Description

Scoring