Critical Vulnerability in Firefox ESR Affects Debian Packages
Summary
DEBIAN-CVE-2026-113470: ... Affects firefox-esr versions 102.11.0esr-1 – 153.5.0esr-1~deb13u1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Firefox ESR (Extended Support Release) is a version of the Firefox web browser designed for organizations that manage their client desktops. It provides long-term support and security updates while maintaining stability. This version is widely used in enterprise environments due to its reliability and extended support cycle. However, recent vulnerabilities have raised concerns regarding its security, particularly in Debian distributions.
Vulnerability Detail
CVE-2026-113470 is a vulnerability identified in Firefox ESR that could potentially allow attackers to exploit the browser, leading to unauthorized access or data breaches. The vulnerability originates from flaws in the browser's handling of certain web content, which could be manipulated by malicious actors. If exploited, this could result in severe ramifications, including the execution of arbitrary code and exposure of sensitive user data.
How To Fix
No fixed version is published for this vulnerability.
To rectify the vulnerability, users should update their Firefox ESR package to the latest patched version. This can be done by executing the following command in the terminal:
sudo apt update && sudo apt upgrade firefox-esr
Ensure that your system is connected to the internet to download the latest updates.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, no specific workarounds have been provided for this vulnerability. Users are advised to apply the patch as soon as it becomes available.
Conclusion
The vulnerability CVE-2026-113470 poses a significant risk to users of Firefox ESR in Debian environments. It is essential to stay informed about updates and apply patches promptly to ensure the security of your systems. Utilizing tools like Vulert can help monitor and alert you to open-source vulnerabilities in real-time.
See every vulnerability recorded for firefox-esr →
FAQ
CVE-2026-113470 is a security vulnerability found in the Firefox ESR browser that could allow attackers to exploit the browser and gain unauthorized access.
You can use the Vulert platform to check if your application is affected by this vulnerability. Visit Vulert Scanner to utilize the Vulert playground without any signup.
While there are no specific workarounds available, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks.
Failing to address this vulnerability could lead to unauthorized access to sensitive data, potential data breaches, and exploitation of the system by malicious actors.
You can find detailed information about vulnerabilities in Firefox ESR on the official Mozilla security advisories page and through vulnerability databases.
References
Related vulnerabilities
Recent vulnerabilities recorded for firefox-esr.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.