Is CVE-2026-68070 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-68070 being exploited in the wild.

How severe is CVE-2026-68070?

High severity, with a CVSS score of 8.8, published 15 September 2026.

Is there a fix for CVE-2026-68070?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-68070 attacked?

It is attacked over the network.

Am I affected by CVE-2026-68070?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-68070: Authentication bypass with unauthenticated root command execution

CVE-2026-68070 · Severity: high · CVSS 8.8 · Published 2026-09-15

A critical function in the affected products lacks proper authentication controls, allowing unauthorized users to execute arbitrary system commands with root privileges. An attacker could exploit this to gain complete control over the affected system, potentially compromising data, disrupting operations, or using the device as a foothold for further attacks on connected infrastructure.

Quick answers

Is CVE-2026-68070 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-68070 being exploited in the wild.
How severe is CVE-2026-68070?: High severity, with a CVSS score of 8.8, published 15 September 2026.
Which products and versions are affected?: <UNKNOWN>.
Is there a fix for CVE-2026-68070?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-68070 attacked?: It is attacked over the network.
Am I affected by CVE-2026-68070?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is an authentication bypass combined with command injection. The affected products expose a critical function that fails to verify the caller's identity or authorization before processing user-supplied input. An attacker can pass arbitrary bytes directly to a system command without authentication, achieving remote code execution with root privileges. The attack requires network access to the exposed function but no prior authentication credentials. This results in complete system compromise and potential lateral movement within connected networks.

Affected products

<UNKNOWN>

Timeline

2026-09-15: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.