CVE-2026-126136

Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Red Hat Enterprise Linux, SUSE Linux, Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird

thunderbird: OAuth2 access token could be sent over an unencrypted connection with Exchange accounts

11. Nov 2026

Ausgewertete Quellen

• Debian
  DSA-6621-1 thunderbird - security update
• Mozilla
  Mozilla Foundation Security Advisory 2026-128
• Mozilla
  Mozilla Foundation Security Advisory 2026-129
• Red Hat
  Red Hat
• CERT-Bund
  WID-SEC-2026-4515