# CERT-FR Flags Firefox Android Vulnerability

Published: 2026-10-22 · Severity: routine · Sectors: Technology
Canonical: https://vorant.io/reports/60f8b689-a7da-52c9-8b2c-56afdc007799/cert-fr-flags-firefox-android-vulnerability

> CERT-FR advisory warns of an unspecified security vulnerability in Firefox for Android versions before 158.0.2.

CERT-FR has published a security advisory regarding a vulnerability affecting Mozilla Firefox for Android, specifically versions prior to 158.0.2. The vulnerability is tracked as CVE-2026-113470 and is detailed in Mozilla's security bulletin MFSA2026-116, published on 21 October 2026. The French CERT does not specify the exact risk category, noting it as 'non spécifié par l'éditeur' (not specified by the vendor).

No technical details on exploitation method, impact severity, or active exploitation status are provided in this advisory. Defenders using Firefox for Android should update to version 158.0.2 or later as recommended by Mozilla's official security bulletin. Organizations with mobile device fleets running Firefox for Android should prioritize patching based on standard update cycles, as no indication of in-the-wild exploitation is given in this report.

## Mentioned in this report

- Vulnerabilities: CVE-2026-113470

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1361

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/60f8b689-a7da-52c9-8b2c-56afdc007799/cert-fr-flags-firefox-android-vulnerability.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup