defineid/SkeletonKey

PoC

CVE-2026-6765, Test only FormAutofill handlers exposed in Firefox

view exploit source poc_in_githubauthor defineidpublished 2026-08-25catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-6765US	—	0.21% (12th)	Exploit	2026-04-21
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.