Vulnerability Discovered in Mozilla Focus Allowing Security Policy Bypass

A vulnerability was discovered in Mozilla Focus on 10 March 2026, allowing an attacker to bypass security policy controls. The flaw specifically enables the circumvention of established security measures within the application. No additional technical details, such as CVE identifiers or affected versions, were provided in the notice. The impact is limited to the described security policy bypass, with no further consequences outlined. The advisory was issued by the French government’s CERT (CERT-FR) under reference CERTFR-2026-AVI-0257.