CVE-2026-6760 is a mitigation bypass vulnerability affecting the Networking: Cookies component in Mozilla Firefox. This flaw could allow bypassing security mitigations related to cookie handling. The vulnerability was fixed in Firefox 150 and Thunderbird 150 as part of a comprehensive security update addressing multiple issues. The CVSS v3.1 base score is 9.8, indicating critical severity, but the vendor rates the impact of this specific issue as moderate. No exploits have been reported in the wild. The fix is included in official Mozilla releases.

The vulnerability could allow an attacker to bypass mitigation controls related to cookie handling in Firefox, potentially leading to unauthorized actions or information disclosure. However, the vendor rates the impact as moderate, suggesting that while the issue is serious, it may not directly lead to full compromise without additional conditions. There are no known active exploits targeting this vulnerability at this time.

Mozilla has released official fixes for this vulnerability in Firefox 150 and Thunderbird 150. Users and administrators should update to these versions or later to remediate the issue. Since this is not a cloud service, local patching is required. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated beyond applying the official update.