Question 1

What is CVE-2026-124950 — CVE-2026-124950?

Accepted Answer

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Question 2

What is the authoritative source for CVE-2026-124950?

Accepted Answer

CVE-2026-124950 (CVE-2026-124950) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-124950CVE-2026-124950

Description