CVE-2026-68830

MEDIUMCVSS 5.5

Description

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

Timeline

Published:September 8th, 2026 6:18 PM

Last modified:September 8th, 2026 9:18 PM

CVSS Scoring

CVSS v3: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-59 CWE-269

References & Reports

Advisories, patches, and third-party reports

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68830

Source: NIST NVD · Data may lag official sources by up to one minute