CVE-2026-35668 | INCIBE

Incibe.Es • April 11, 2026

Base Score: 7.10 HIGH Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Attack Vector (AV): Network Attack Complexity (AC): Low Attack Requirements (AT): None Privileges Required (PR): Low User Interaction (UI): None Confidentiality (VC): High Integrity (VI): None Availability (VA): None Confidentiality (SC): None Integrity (SI): None Availability (SA): None

Base Score: 7.70 HIGH Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None Scope (S): Changed Confidentiality (C): High Integrity (I): None Availability (A): None

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Vulnerabilities CVE-2026-6121 and CVE-2026-35668 Discovered On April 12, 2026, INCIBE-CERT published details on CVE-2026-6121, a high-severity vulnerability with a CVSS score of 8.80, allowing remote exploitation with low complexity and no user interaction required. This vulnerability affects systems with high confidentiality, integrity, and availability impacts. Additionally, CVE-2026-35668 was published on April 10, 2026, with a CVSS score of 7.10, also allowing network-based attacks with low complexity and low privileges required. Both vulnerabilities pose significant risks to affected systems, with CVE-2026-6121 being particularly critical due to its potential for complete data compromise. Organizations are urged to assess their systems for these vulnerabilities and implement necessary mitigations. No specific patches have been mentioned yet for either CVE. The vulnerabilities have been classified as high severity due to their potential impact on data security. 1 sources 68

Extracted Entities

CVEs (1)

CVE-2026-35668