CVE-2026-59102 | INCIBE

Incibe.Es • July 3, 2026

Base Score: 2.10 LOW Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Attack Vector (AV): Network Attack Complexity (AC): Low Attack Requirements (AT): Present Privileges Required (PR): Low User Interaction (UI): Passsive Confidentiality (VC): None Integrity (VI): None Availability (VA): None Confidentiality (SC): Low Integrity (SI): Low Availability (SA): None

Base Score: 5.40 MEDIUM Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): Required Scope (S): Changed Confidentiality (C): Low Integrity (I): Low Availability (A): None

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Disclosed: CVE-2026-14619 and CVE-2026-59102 Two vulnerabilities, CVE-2026-14619 and CVE-2026-59102, have been disclosed by INCIBE. CVE-2026-14619, published on 2026-07-04, has a low base score of 2.10 and a medium score of 6.30, affecting network systems with low attack complexity and requiring low privileges. CVE-2026-59102, published on 2026-07-02, also has a low base score of 2.10 and a medium score of 5.40, with similar attack vectors but requiring user interaction. Both vulnerabilities pose risks to confidentiality and integrity but are not currently exploited in the wild. Organizations should assess their systems for these vulnerabilities and apply necessary mitigations. 2 sources 28

Extracted Entities

CVEs (1)

CVE-2026-59102