CVE-2026-2757 involves incorrect boundary conditions in the WebRTC Audio/Video component of Mozilla Firefox, which could lead to critical security issues. The vulnerability was fixed in Firefox 148 and Firefox ESR 115.33. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network exploitable with no privileges or user interaction required, and resulting in high impact on confidentiality, integrity, and availability. The Mozilla advisories confirm the fix and classify the impact as high. No exploits in the wild are currently known.

Successful exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and availability of the affected Firefox browser through the WebRTC Audio/Video component. Given the CVSS score of 9.8, the impact is critical, potentially enabling remote code execution or other severe consequences. However, no active exploitation has been reported to date.

Mozilla has released official fixes for this vulnerability in Firefox 148 and Firefox ESR 115.33. Users and administrators should update affected Firefox installations to these versions or later to remediate the issue. Since this is not a cloud service, patching the client software is required. There are no vendor advisories indicating that no action is required or that the issue is already mitigated without patching.