Question 1

What is CVE-2026-124874 — CVE-2026-124874?

Accepted Answer

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Question 2

What is the authoritative source for CVE-2026-124874?

Accepted Answer

CVE-2026-124874 (CVE-2026-124874) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-124874CVE-2026-124874

Description

Scoring