CVE-2023-26068

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-260699.8Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).CVE-2023-26077.2The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions CVE-2023-260709.8Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).CVE-2023-260717.5An issue was discovered in MCUBO ICT through 10.12.4 (aka 6.0.2). An Observable Response Discrepancy can occur under the login web page. In CVE-2023-260729.8An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 22CVE-2023-260739.8An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 22CVE-2023-260749.8An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 22CVE-2023-260759.8An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 22CVE-2023-260769.8An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5CVE-2023-260777.8Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.CVE-2023-260787.8Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs.CVE-2023-26084.3The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the ord
CVE-2023-26068: Critical severity, CVSS 9.8 | Vulnix