June 5, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-21668NVD

Vulnerability Summary

A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.
Severity Level
HIGH(8.8)
Published Date
Mar 12, 2026
Last Modified
May 10, 2026
Exploitation Status
UNKNOWN
Root Weakness (CWE)
CWE-862: Missing Authorization ↗
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
EPSS Score (30-Day)
0.04%Probability
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References