CVE-2026-6767

CVE-2026-6767 is an unspecified issue in the Libraries component of NSS (Network Security Services) that affects Mozilla Firefox, Firefox ESR, and Thunderbird across multiple versions. The vulnerability was remediated in Firefox 150, Firefox ESR 115.35 and 140.10, and Thunderbird 150 and 140.10. The vulnerability carries a CVSS score of 5.3 (Medium) with a network-based attack vector requiring no privileges or user interaction, indicating a relatively accessible attack surface. The primary impact is limited to confidentiality through low-severity information disclosure, while integrity and availability remain unaffected. There is currently no evidence of active exploitation in the wild, as the vulnerability does not appear on the KEV catalog and is classified as inactive on the Hot List. The EPSS score of 0.00036 suggests minimal likelihood of exploitation, and no public exploit code is currently available, indicating low community attention and exploitation risk at this time.