A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 148.0.1. Impacted is an unknown function of the component CSS Parser. Performing a manipulation results in permissive cross-domain policy with untrusted domains.
This vulnerability is cataloged as CVE-2026-3846. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.
