CVE-2026-124909 is an information disclosure vulnerability in the Private Browsing component of Firefox. This flaw could allow an attacker to gain access to information that should remain private during private browsing sessions. The vulnerability was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The CVSS score is 4.3, indicating a medium severity level.