CVE-2026-68762

MediumCVSS 5.9/10Last modified Aug 28, 2026

Description

In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 17, 2026
Last modified
Aug 28, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-687637.5Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reseCVE-2026-687656.1hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module (module 34301) tCVE-2026-687667.8hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --ouCVE-2026-687676.1hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly thCVE-2026-687686.1hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling outputCVE-2026-687709.8sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploitiCVE-2026-687719.8ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackerCVE-2026-687728.0ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write accessCVE-2026-687758.8Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-687766.5Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687776.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-687786.5Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68762: Medium severity, CVSS 5.9 | Vulnix