CVE•Published 2026-06-02•Modified 2026-07-22•0 articles on news•5 live references•NVD data

CVE-2026-10702Mozilla · Firefox

Vulnerability data via NVD (ingested)

CVSS v3.1

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS percentile

Exploit Prediction Scoring System · top 57% of all CVEs

Weaknesses (CWE)

CWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-733Compiler Optimization Removal or Modification of Security-critical Code

Description

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

Timeline

Published 2026-06-02

Modified 2026-07-22

External references

NVD MITRE Exploit-DB GitHub PoC VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-10702

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Mozilla Firefox"

All exposed Mozilla Firefox instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Firefox"

HTTP body or banner mentions "Firefox" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2026-10702

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2026-10702

Censys host search filtered to this CVE id.

grep.app

CVE-2026-10702

Public source-code mentions — fast PoC discovery.

GitHub code

CVE-2026-10702

GitHub code search for direct mentions.

Google dork

"CVE-2026-10702" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-107028 repos

nomi-sec/PoC-in-GitHubunknown

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

★ 8,061·updated 1d ago

wolfSSL/wolfsslC

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 fo…

★ 2,933·updated 2d ago

sn0x-sharma/NEMESISC++

Differential fuzzer for WebAssembly-GC / JavaScript-JIT compilers finds miscompilations across V8 tiers, then minimizes and reports them. For authorized research & responsible disc…

★ 75·updated 1mo ago

pubglite55/oppo-ghostlockC

OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation

★ 65·updated 5d ago

liamromanis101/K8s-container_escape_auditShell

Look for possible escape vectors from a container

★ 7·updated 1w ago

arxivsub/arXivSub_daily_arxivunknown

Daily arXiv AI summarization powered by arXivSub

★ 4·updated 2d ago

d1667018881/myrootJavaScript

We haven't classified any articles referencing CVE-2026-10702 yet. The external references above still apply.