CVE-2026-124936 is a spoofing vulnerability in the Address Bar component of Firefox. This security flaw could allow an attacker to deceive users by presenting misleading information in the browser's address bar. The issue was addressed and fixed in Firefox version 160.