Skip to main content

Ubuntu CVE-2026-91768

| EUVDEUVD-2026-87350 MEDIUM
Incomplete Comparison with Missing Factors (CWE-1023)
2026-09-24 vendor:ubuntu
Information Disclosure Red Hat Suse
6.5
CVSS 3.1 · Vendor: vendor:ubuntu
Share

Severity by source

Vendor (vendor:ubuntu) PRIMARY
6.5 MEDIUM
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
SUSE
MEDIUM
qualitative
Red Hat
6.5 MEDIUM
qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Patch available
Sep 25, 2026 - 22:04 EUVD
Analysis Generated
Sep 25, 2026 - 01:14 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

Risk assessment is currently not possible for CVE-2026-91768, an Ubuntu-tracked identifier that arrives with no description, no CVSS score, no CVSS vector, no CWE classification, and no CPE data; the only signal available is that the record was reported by the Ubuntu vendor source. Because attack vector, privileges required, user interaction, and affected package or deployment mode are all unspecified, no meaningful statement can be made about what an attacker could do or who is exposed. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Exploit
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation prerequisites cannot be determined: the description is unavailable and the CVSS vector is N/A, so attack vector, required privileges, user interaction, and any configuration or feature dependencies are all unknown. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Risk cannot be meaningfully assessed from the provided data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Patch status: No vendor-released patch identified at time of analysis, and no fix version can be cited because no affected component has been identified. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-1023 – Incomplete Comparison with Missing Factors

View all
CVE-2026-7473 MEDIUM POC
6.9
CVE-2026-4599 CRITICAL
9.3
CVE-2026-85491 HIGH
8.8
CVE-2026-54713 LOW POC
3.7
CVE-2026-24255 HIGH
7.5
CVE-2021-23146 HIGH
7.5
CVE-2026-53859 MEDIUM
6.0
CVE-2026-53839 MEDIUM
6.0

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Affected

Share

CVE-2026-91768 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy