CVE-2026-6121 INCIBE-CERT - Vulnerabilities RSS / 6h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

www.incibe.es • April 12, 2026

Puntuación base: 7.40 ALTA Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Attack Requirements (AT): Ninguno Privilegios Requeridos (PR): Bajo Interacción del usuario (UI): Ninguno Confidentiality (VC): Alto Integrity (VI): Alto Availability (VA): Alto Confidentiality (SC): Ninguno Integrity (SI): Ninguno Availability (SA): Ninguno Exploit Maturity (E): POC

Puntuación base: 8.80 ALTA Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Privilegios Requeridos (PR): Bajo Interacción del usuario (UI): Ninguno Alcance (S): Sin modificar Impacto a la confidencialidad (C): Alto Impacto a la integridad (I): Alto Impacto a la disponibilidad (A): Alto

Puntuación base: 9.00 ALTA Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Autenticación (Au): Simple Impacto a la confidencialidad (C): Completo Impacto a la integridad (I): Completo Impacto a la disponibilidad (A): Completo

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Vulnerabilities CVE-2026-6121 and CVE-2026-35668 Discovered On April 12, 2026, INCIBE-CERT published details on CVE-2026-6121, a high-severity vulnerability with a CVSS score of 8.80, allowing remote exploitation with low complexity and no user interaction required. This vulnerability affects systems with high confidentiality, integrity, and availability impacts. Additionally, CVE-2026-35668 was published on April 10, 2026, with a CVSS score of 7.10, also allowing network-based attacks with low complexity and low privileges required. Both vulnerabilities pose significant risks to affected systems, with CVE-2026-6121 being particularly critical due to its potential for complete data compromise. Organizations are urged to assess their systems for these vulnerabilities and implement necessary mitigations. No specific patches have been mentioned yet for either CVE. The vulnerabilities have been classified as high severity due to their potential impact on data security. 1 sources 68

Extracted Entities

CVEs (1)

CVE-2026-6121