CVE-2026-3889

Published: Mar 24, 2026

Modified: Apr 13, 2026

PUBLISHED

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.

Vendor	Product	Versions
Mozilla	Thunderbird	unaffected `140.9 - <= 140.` unaffected `149 - <= `

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.