Skip to content

CVE record · 1 source

CVE-2026-113867

Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas.

Vendor: Mozilla
Product: Thunderbird
Exposure class: Email

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

17

CVE NVD 11d ago

Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas.

Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused…

Fix available CVE-2026-113867 Mozilla