CVE-2026-109780 is a critical mitigation bypass vulnerability in the DOM: Core & HTML component of Firefox. This flaw allows attackers to bypass security mitigations, potentially leading to full compromise of confidentiality, integrity, and availability. The issue was fixed in Firefox version 158.