The vulnerability identified as CVE-2026-74958 involves information disclosure within the WebRTC component of Mozilla Firefox. It was reported by Tomoya Nakanishi and is classified with moderate impact. Mozilla fixed this issue in Firefox version 154 and Firefox ESR 153.1 as part of their August 18, 2026 security advisories. The fix is included in official Mozilla releases, ensuring that users who update to these versions or later are protected. This vulnerability is one among many addressed in these releases, which also include fixes for privilege escalation, use-after-free, mitigation bypass, and other security issues.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of information through the WebRTC component. The impact is considered moderate, indicating that while the vulnerability could expose sensitive data, it is not rated as critical or high severity. There are no reports of active exploitation in the wild. The fix mitigates the risk by correcting the underlying flaw in the affected component.

Mozilla has released official fixes for this vulnerability in Firefox 154 and Firefox ESR 153.1. Users and administrators should update to these versions or later to remediate the vulnerability. Since the vendor advisory confirms the availability of an official fix, applying these updates is the recommended and sufficient mitigation. No additional action is required beyond updating to the fixed versions.