CVE-2026-15718: exploitation status and patch state

CVE-2026-15718 · CVSS 4.3 MEDIUM

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6.

Is CVE-2026-15718 exploited?

• Not in the CISA KEV catalog.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2026-15718

• Adobe Experience Manager Fixes Missing-Auth and SSRF Flaws (2026-07-18)

Primary sources

• NVD record

What this record does not say

• No EPSS score.
• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-08-11.