Skip to content

CVE-2026-25680

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 15, 2026
Last Seen
October 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...

Public Exploits

Checking GitHub for proof-of-concept code…