CERT-In Security Alert 2026: Zoom, Firefox and Thunderbird Users Warned of Data Theft Risk

CERT-In Cybersecurity Warning, October 2026: The Indian government's cybersecurity agency has reportedly issued security advisories for users of Mozilla Firefox, Thunderbird and Zoom Workplace. The warnings highlight software vulnerabilities that could potentially expose sensitive information or allow attackers to compromise affected devices.

According to a Live Hindustan report published on October 29, 2026, the Indian Computer Emergency Response Team (CERT-In) issued two separate security advisories on October 28.

The reported vulnerabilities affect specific versions of Mozilla's web browser and email software, along with Zoom's video conferencing and workplace applications.

Users running affected versions have been advised to install the latest security updates.

However, the warning does not mean that every Firefox, Thunderbird or Zoom user has been hacked. It indicates that vulnerable software could be exploited under certain conditions.

Why Has CERT-In Issued a Security Warning?

CERT-In is India's national cybersecurity incident response agency. It publishes advisories about security vulnerabilities, cyber threats and measures that organisations and individuals can take to protect their systems.

The latest reported warnings concern security weaknesses in widely used applications.

Mozilla Firefox is a popular web browser used for accessing websites, online services and business applications.

Thunderbird is an email client that helps users manage messages, attachments and communication accounts.

Zoom Workplace is commonly used for online meetings, video calls and workplace collaboration.

Because these applications may handle personal information, business documents and confidential communication, security weaknesses can present risks if attackers successfully exploit them.

What Can Hackers Do With These Vulnerabilities?

According to the report, the identified vulnerabilities may create opportunities for different types of cyberattacks.

Depending on the specific weakness and the conditions required to exploit it, attackers could potentially access sensitive information, gain additional permissions or execute malicious code.

In more serious cases, successful exploitation could compromise the security of the affected system.

However, these outcomes are potential risks rather than confirmed consequences for every user.

The actual impact depends on the vulnerability, software version, device configuration and whether an attacker can meet the conditions required for exploitation.

Which Firefox and Thunderbird Versions Are Affected?

The report identifies several Mozilla software versions that may require security updates.

These version thresholds are reproduced from the supplied report. Users should consult the official CERT-In and Mozilla advisories to confirm the applicable product branches and patched releases.

Firefox ESR stands for Extended Support Release. It is commonly used by organisations that prefer a more stable release cycle with security maintenance.

Users should not assume that a higher version number from an unrelated release branch is necessarily the correct update for their installation.

Which Zoom Workplace Versions Are Affected?

The report also lists affected versions of Zoom Workplace and related products.

Users of these products should check whether a newer security-fixed version is available for their device.

Business users may need assistance from their IT administrators, especially when Zoom is deployed through centrally managed systems.

How to Update Mozilla Firefox

Firefox users can check their installed version and download security updates directly from the browser.

1. Open Mozilla Firefox on your computer.

2. Click the three-line menu in the upper-right corner.

3. Select Help, followed by About Firefox.

4. Check the installed version.

5. Allow Firefox to download an available update.

6. Restart the browser when prompted.

Users should install the latest supported release rather than rely only on the minimum version mentioned in the advisory.

Official website: Mozilla Firefox.

How to Update Mozilla Thunderbird

Thunderbird users should also verify that they are running a supported, security-updated version.

Open Thunderbird and navigate to its About section, usually found under Help.

The application can check for updates and display the installed version.

If a newer security release is available, install it and restart Thunderbird if required.

Official website: Mozilla Thunderbird.

How to Update Zoom Workplace

Zoom users can check for updates through the application's settings or profile menu, depending on the platform.

On Windows and macOS, open Zoom Workplace, access the profile menu and look for the update option.

Android users should check the Google Play Store, while iPhone users can check Apple's App Store.

For managed workplace devices, software updates may be controlled by the organisation's IT department.

Users should avoid downloading supposed security patches from unfamiliar websites or links received through unsolicited messages.

Official website: Zoom Download Center.

What Do the Official CERT-In Advisories Say?

The October 28 warnings have been confirmed on CERT-In's official website.

The agency assigned a HIGH severity rating to both vulnerability notes.

The Mozilla advisory, identified as CIVN-2026-0531, warns of possible arbitrary code execution, sensitive information exposure and denial-of-service conditions.

The Zoom advisory, CIVN-2026-0530, identifies risks involving privilege escalation and disclosure of sensitive information.

CERT-In recommends applying the appropriate security updates released by the software vendors.

Users can read the official notices here:

• CERT-In Mozilla Security Warning

• CERT-In Zoom Security Warning

Important Security Tips for Firefox and Zoom Users

Installing security updates is the most important immediate precaution, but users should also follow basic cybersecurity practices.

Enable automatic software updates wherever possible. Avoid opening suspicious links or attachments, even if they appear to come from familiar contacts.

Use strong, unique passwords and enable multifactor authentication for important accounts.

Keep the operating system updated, as application security also depends on the underlying device.

If a work computer cannot be updated without administrator permission, contact the organisation's IT team promptly.

Should You Stop Using Zoom or Firefox?

CERT-In has not advised everyone to stop using these applications.

The primary recommendation is to install vendor-provided security fixes.

Users running supported, fully updated versions can reduce their exposure to the vulnerabilities identified in these notices.

However, software updates cannot eliminate every possible cybersecurity risk, so safe browsing and account security remain important.

CERT-In Security Alert 2026: Final Update

India's cybersecurity agency has confirmed high-severity vulnerabilities affecting specific versions of Mozilla Firefox, Firefox ESR, Thunderbird and Zoom Workplace.

Successful exploitation could potentially expose sensitive data, allow unauthorised access or compromise affected systems.

The key takeaway: If you use Firefox, Thunderbird or Zoom, check your installed version and update the software through its official website, built-in updater or trusted app store. There is no need to panic, but delaying important security updates can leave devices unnecessarily exposed.