CVE-2026-118027 is a frame poisoning vulnerability in the Layout component of Firefox ESR. This security flaw was addressed and fixed in Firefox ESR version 115.44. The vulnerability is considered high impact by the vendor. No public exploit or active exploitation in the wild has been reported. Users of affected versions should upgrade to the fixed release to mitigate the risk.