CVE-2026-68760
Received Received - Intake

Authentication Bypass in Software Due to Cache Conditions

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: JFrog

Description
An unauthenticated user may bypass authentication under specific cache conditions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-68760
EUVD
EUVD-2026-57249

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated user to bypass authentication when specific cache conditions are met. It does not require any prior access or credentials.

Impact Analysis

An attacker could gain unauthorized access to systems or data without authentication. The impact is limited to information disclosure as per CVSS, but could enable further attacks depending on system configuration.

Compliance Impact

This vulnerability may violate compliance requirements that mandate strict authentication controls, such as GDPR's data protection principles or HIPAA's access controls. Organizations must assess their specific compliance obligations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68760. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart