CVE-2026-68752

HighCVSS 7.2/10Last modified Oct 24, 2026

Description

A Project Resource Manager may gain broader administrative privileges under specific conditions.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2026
Last modified
Oct 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-687535.3An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.CVE-2026-687546.5A repository publisher without delete permission may modify protected package content under specific conditions.CVE-2026-687554.3A bundle writer may create misleading release promotion information under specific conditions.CVE-2026-687566.6A party with write access to stored session data may affect JFrog Artifactory under specific conditions.CVE-2026-687577.5A user with access to a valid SAML response may impersonate another user under specific conditions.CVE-2026-687586.5A low-privileged authenticated user may access restricted support information under specific conditions.CVE-2026-687597.2A holder of a valid integration credential may impersonate other users under specific conditions.CVE-2026-687610.0ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allowCVE-2026-687605.3An unauthenticated user may bypass authentication under specific cache conditions.CVE-2026-687625.9In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possibleCVE-2026-687637.5Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reseCVE-2026-687656.1hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module (module 34301) t
CVE-2026-68752: High severity, CVSS 7.2 | Vulnix