diff --git a/firefox.spec b/firefox.spec
index 4380a6299700427052941666583bac3cfd48067f..13e27fabfa31d3ea3d8df4f0c5e8b07e274b753a 100644
--- a/firefox.spec
+++ b/firefox.spec
@@ -68,11 +68,11 @@
 %global __provides_exclude_from ^%{mozappdir}
 %global __requires_exclude ^(%%(find %{buildroot}%{mozappdir} -name '*.so' | xargs -n1 basename | sort -u | paste -s -d '|' -))
 
-%global langpacks_date 20260723
+%global langpacks_date 20260819
 
 Summary:        Mozilla Firefox Web browser
 Name:           firefox
-Version:        140.13.0
+Version:        140.14.0
 Release:        1%{?dist}
 URL:            https://www.mozilla.org/firefox/
 License:        MPLv1.1 or GPLv2+ or LGPLv2+
@@ -768,6 +768,18 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
 %{_datadir}/applications/firefox-x11.desktop
 
 %changelog
+* Wed Aug 19 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 140.14.0-1
+- [Type] security
+- [DESC] Update to 140.14.0esr (MFSA2026-76), fixes all Linux CVEs:
+- CVE-2026-74934, CVE-2026-74935, CVE-2026-74936, CVE-2026-74939,
+- CVE-2026-74940, CVE-2026-74941, CVE-2026-74942, CVE-2026-74943,
+- CVE-2026-74944, CVE-2026-74945, CVE-2026-74946, CVE-2026-74948,
+- CVE-2026-74949, CVE-2026-74953, CVE-2026-74957, CVE-2026-74959,
+- CVE-2026-74960, CVE-2026-74962, CVE-2026-74963, CVE-2026-74964,
+- CVE-2026-74965, CVE-2026-74967, CVE-2026-74969, CVE-2026-74971,
+- CVE-2026-74972, CVE-2026-74973, CVE-2026-74974, CVE-2026-74976,
+- CVE-2026-74983, CVE-2026-74987, CVE-2026-74990
+
 * Thu Jul 23 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 140.13.0-1
 - [Type] security
 - [DESC] Update to 140.13.0esr (MFSA2026-70), fixes all Linux CVEs:
diff --git a/sources b/sources
index 0005ca3c242ab1309d887558f05d28c9f99072e7..271858e26603c1c45f648e279443b8ff3b4664b0 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (cbindgen-vendor.tar.xz) = 17b4bdb05f21917b11b78e086ebb4e7d7cc28c046ba3267c7be45380fe3e0a24a2722d71f70423365dd152beff198f8f4f41660a12cfb89c8806d2781bdfeb87
-SHA512 (firefox-langpacks-140.13.0esr-20260723.tar.xz) = 7af904fbd1f1476dcffc3ec6c839e4170330b86e29b399d4ed4c5bd73c1e1980d28ef434d1de7fdab157e63fddea58b8a37cb7ae9f45282ce4463682fd0b6b84
-SHA512 (firefox-140.13.0esr.processed-source.tar.xz) = 29806e2f5d4705082f26aa5c18e07a483898e23f4b6df560d0bfe59b4e24558c7f1d3004076d8ef7191f30782f4bc1dbd7ded0c027d7059282ea70ea2429c667
+SHA512 (firefox-langpacks-140.14.0esr-20260819.tar.xz) = 50e01c7f568c044d28c00f5a92ba528a577c2cddd8d8a27d55722b4528e890efbe2da3ce070c6c197f9d74d371992169c46a4d9f62a80704563309d874915ca2
+SHA512 (firefox-140.14.0esr.processed-source.tar.xz) = e447f90502492992993f7f93adda34e77b465ebf636ecf749431c6f1cdf5f49c38e0530f7b6f7938b01afa61e65744856db7c884b95dee903797de01e1afb8b8