CVE-2026-124872 is a use-after-free vulnerability in the Cycle Collector component of Firefox. This flaw was addressed and fixed in Firefox 160 and Firefox ESR versions 115.45 and 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it could lead to significant impact if exploited.