CVE-2026-68758

MediumCVSS 6.5/10Last modified Oct 24, 2026

Description

A low-privileged authenticated user may access restricted support information under specific conditions.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2026
Last modified
Oct 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-687597.2A holder of a valid integration credential may impersonate other users under specific conditions.CVE-2026-687610.0ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allowCVE-2026-687605.3An unauthenticated user may bypass authentication under specific cache conditions.CVE-2026-687625.9In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possibleCVE-2026-687637.5Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reseCVE-2026-687656.1hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module (module 34301) tCVE-2026-687667.8hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --ouCVE-2026-687676.1hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly thCVE-2026-687686.1hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling outputCVE-2026-687709.8sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploitiCVE-2026-687719.8ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackerCVE-2026-687728.0ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access
CVE-2026-68758: Medium severity, CVSS 6.5 | Vulnix