NetSight
medium6.5

CVE-2026-3889

Spoofing issue in Thunderbird.

Impact

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.

Affected products

VendorProductAffected versions
MozillaThunderbird
before 140.9.0
before 149.0

Weakness classification

References