CVE-2026-69644

MediumCVSS 5.5/10Last modified Oct 16, 2026

Description

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-696457.0Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.CVE-2026-696468.3Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent CVE-2026-696487.0Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.CVE-2026-696498.8Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.CVE-2026-69655.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up tCVE-2026-696507.8Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locaCVE-2026-696517.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-696527.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-696547.0Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.CVE-2026-696579.3XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the credential may log in to the affected deviCVE-2026-696589.8MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enaCVE-2026-696595.5Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset
CVE-2026-69644: Medium severity, CVSS 5.5 | Vulnix