CVE-2026-118026 is a vulnerability involving an invalid pointer in the JavaScript garbage collection (GC) component of Firefox. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is classified with high impact according to the Mozilla advisory.