CVE-2026-124950 is a same-origin policy bypass vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw allows bypassing the browser's same-origin policy, which is critical for web security. The issue was addressed and fixed in Firefox version 160. No public exploit or in-the-wild exploitation has been reported. The vulnerability is considered high impact due to the potential security implications of same-origin policy bypasses.