CVE-2026-48866 INCIBE-CERT - Vulnerabilities RSS / 20h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

www.incibe.es • June 2, 2026

Puntuación base: 9.60 CRÍTICA Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Privilegios Requeridos (PR): Ninguno Interacción del usuario (UI): Obligatorio Alcance (S): Modificado Impacto a la confidencialidad (C): Alto Impacto a la integridad (I): Alto Impacto a la disponibilidad (A): Alto

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities CVE-2026-48866 and CVE-2026-7313 Disclosed Two critical vulnerabilities, CVE-2026-48866 and CVE-2026-7313, were disclosed recently. CVE-2026-48866, published on June 1, 2026, has a CVSS score of 9.60, indicating a critical threat with high impacts on confidentiality, integrity, and availability. It requires user interaction and has a low access complexity, making it easier to exploit. CVE-2026-7313, published on June 2, 2026, also has a CVSS score of 3.1 but requires elevated privileges for exploitation. This vulnerability affects systems accessed over the network, with a high impact on confidentiality and integrity but no impact on availability. Both vulnerabilities pose significant risks to organizations and require immediate attention. 7 sources 73

Extracted Entities

CVEs (1)

CVE-2026-48866