CVE record · 1 source
CVE-2026-126134
Thunderbird allowed feed subscriptions to file: URLs that point to a network share.
- Vendor
- Mozilla
- Product
- Thunderbird
- Exposure class
- Identity, Email
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Thunderbird allowed feed subscriptions to file: URLs that point to a network share.
Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed. Windows then sent…