CVE-2026-117960 is a spoofing vulnerability in the DOM Core and HTML components of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is classified with high impact by Mozilla. No active exploitation in the wild has been reported.