CVE-2026-79657 INCIBE-CERT - Vulnerabilities RSS / 13h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

www.incibe.es • August 26, 2026

Puntuación base: 9.30 CRÍTICA Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Attack Requirements (AT): Ninguno Privilegios Requeridos (PR): Ninguno Interacción del usuario (UI): Ninguno Confidentiality (VC): Alto Integrity (VI): Alto Availability (VA): Alto Confidentiality (SC): Ninguno Integrity (SI): Ninguno Availability (SA): Ninguno

Puntuación base: 9.80 CRÍTICA Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de acceso (AV): A través de red Complejidad de acceso (AC): Bajo Privilegios Requeridos (PR): Ninguno Interacción del usuario (UI): Ninguno Alcance (S): Sin modificar Impacto a la confidencialidad (C): Alto Impacto a la integridad (I): Alto Impacto a la disponibilidad (A): Alto

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities CVE-2026-79657 and CVE-2026-78568 Disclosed Two critical vulnerabilities, CVE-2026-79657 and CVE-2026-78568, were published on August 25, 2026, with CVSS scores of 9.80 and 9.30 respectively. Both vulnerabilities allow remote access with low complexity and no user interaction required, impacting confidentiality, integrity, and availability. They are categorized as critical due to their potential for severe exploitation. Affected systems include those that utilize the software associated with these CVEs. Security teams are advised to prioritize patching these vulnerabilities immediately. No active exploitation has been confirmed yet, but the high severity warrants urgent attention. The vulnerabilities were disclosed by INCIBE-CERT, indicating a reliable source of information. 74

Extracted Entities

CVEs (1)

CVE-2026-79657