Skip to content

CVE-2026-68830

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 8, 2026
Last Seen
September 8, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Information Disclosure Vulnerabilities in Windows UPnP Device Host39.9

On September 8, 2026, Microsoft disclosed two critical vulnerabilities in the Windows Universal Plug and Play (UPnP) Device Host, identified as CVE-2026-68830 and CVE-2026-69351. Both vulnerabilities allow authorized attackers to disclose sensitive information locally, specifically unauthorized acce...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-269 - Improper Privilege ManagementCwe-59 - Improper Link Resolution Before File AccessWindowsWindows Universal Plug And Play (UPnP) Device Host Information Disclosure Vulnerability