CVE-2026-120627: Private Internet Access Firefox extension

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Описание

Оригинално описание

The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This issue was fixed in version 3.2.5, but reintroduced in later versions.

Засегнати продукти

Private Internet Access Firefox extension: 3.2.5 до 4.0.5

История

2 ноември 2026 Публикувано

Първоизточници

https://www.cve.org/CVERecord?id=CVE-2026-120627
https://nvd.nist.gov/vuln/detail/CVE-2026-120627
https://addons.mozilla.org/en-US/firefox/addon/private-internet-access-ext/
https://github.com/Rexyysilent/PI-ay-ay-disclosure