CVE-2026-124874 is a vulnerability in the Networking: HTTP component of Firefox that allows bypassing the same-origin policy. This security flaw was addressed and fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7. The vulnerability has a high impact rating according to the Mozilla advisory. No public exploit or active exploitation in the wild has been reported.