CVE•Published 2026-07-30•Modified 2026-08-03•0 articles on news•3 live references•NVD data

CVE-2026-68562

Vulnerability data via NVD (ingested)

CVSS v3.1

6.2

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

EPSS percentile

Exploit Prediction Scoring System · top 87% of all CVEs

Weaknesses (CWE)

CWE-610Externally Controlled Reference to a Resource in Another Sphere

Description

A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause the Ansible controller to read its own local files and copy them to the managed node. This vulnerability leads to information disclosure, potentially exposing sensitive controller-side data such as private keys or credentials.

Timeline

Published 2026-07-30

Modified 2026-08-03

External references

NVD MITRE VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common). Live host counts are a Premium feature.

Shodan · vuln tag

vuln:CVE-2026-68562

Hosts Shodan has explicitly fingerprinted as vulnerable.

More intel sources (5)

Shodan report

vuln:CVE-2026-68562

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2026-68562

Censys host search filtered to this CVE id.

grep.app

CVE-2026-68562