CVE-2026-118000 is an information disclosure vulnerability in the Networking: HTTP component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability could potentially allow unauthorized access to sensitive information through the HTTP networking stack. The vendor has assigned a high impact to this issue and has released an official fix.