CVE-2026-117998 is a mitigation bypass vulnerability in the DOM Push Subscriptions component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability was rated with high impact by Mozilla. No known exploits in the wild have been reported.