CVE-2026-68758

Awaiting Analysis Awaiting Analysis - Queue

Authenticated Access to Restricted Support Data in Product

Publication date: 2026-08-12

Last updated on: 2026-08-28

Assigner: JFrog

Description

A low-privileged authenticated user may access restricted support information under specific conditions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-28

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-68758

EUVD

EUVD-2026-57255

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability allows a low-privileged authenticated user to access restricted support information under specific conditions. It does not require high privileges or complex conditions to exploit.

Impact Analysis

An attacker with low privileges could gain access to sensitive support information, potentially leading to data leaks or further exploitation of system weaknesses.

Compliance Impact

The vulnerability allows low-privileged authenticated users to access restricted support information under specific conditions. This could potentially lead to unauthorized data exposure, which may violate compliance requirements for standards like GDPR (data protection) or HIPAA (healthcare data privacy) if sensitive information is involved.

Mitigation Strategies

Apply vendor patches or updates if available. Restrict user privileges to prevent unauthorized access to support information. Monitor logs for unusual access patterns to restricted data.

Hi! I’m here to help you understand CVE-2026-68758. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70