VULNERABILITY INTELLIGENCE

CVE-2026-68490

EPSS probability0.14%
CISA KEVNot currently listed
Published2026-09-23
Last modified2026-09-24

Description

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

Weakness classification

  • support@hackerone.com: CWE-732

Primary references