Skip to content

CVE record · 1 source

CVE-2026-126136

For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the…

Vendor: Mozilla
Product: Thunderbird
Exposure class: Email

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

32

CVE NVD 3h ago

For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the…

For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the configured server URL used unencrypted HTTP. An attacker able to observe network…

Fix available CVE-2026-126136 Mozilla