UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-120627
The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading to leakage of PIA proxy credentials when a user visits any malicious website that issues a Basic auth challenge. This issue was fixed in version 3.2.5, but reintroduced in later versions.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-02T20:58:11.011495+00:00
- Cve id
- CVE-2026-120627
- First seen by Signal
- 2026-11-02T20:53:23+00:00
- Retrieved at
- 2026-11-02T20:58:51+00:00
- Published at
- 2026-11-02T18:18:52.733
- Last modified
- 2026-11-02T19:34:23.993
Explore deeper with Ninja Signal's threat intelligence graph