CVE-2026-113867: Affected product not specified by the source

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

A remote XMPP user could send a crafted request that caused Thunderbird to inject arbitrary stanzas into the user's connection, which the server would then process as if sent by the user.

Published 20-Oct-2026 21:23 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 21:22:07.084487+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-113867.html