OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-68493

LOW · CVSS 3.1 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A vulnerability exists that allows a malicious authenticated user to exploit a predictable unique identifier to access membership information for circles they do not belong to. This could lead to unauthorized information disclosure, potentially compromising user privacy. Organizations utilizing the affected products should prioritize remediation to safeguard against potential misuse of this information.

CVE
CVE-2026-68493
Severity
LOW
CVSS
3.1
EPSS
0.23%

Original NVD Description

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.