CVE-2026-100766 is an information disclosure vulnerability in the Networking: JAR component of Firefox. The issue allows unauthorized disclosure of information. This vulnerability has been fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. The CVSS v3.1 base score is 4.3, indicating a medium severity level.