CVE-2026-124856 is a high-severity vulnerability involving incorrect boundary conditions in the Networking: HTTP component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability could potentially allow an attacker to cause significant impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported to date.