Medium severity6.5NVD Advisory· Published Sep 15, 2026· Updated Sep 18, 2026

CVE-2026-68953

Description

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTP(S) requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisagov/Csafreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Digital Watchdog/Digital-Watchdogllm-fuzzy

Patches

Vulnerability mechanics

References

digital-watchdog.com/downloads/nvd
github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-01.jsonnvd
www.cisa.gov/news-events/ics-advisories/icsa-26-258-01nvd

News mentions

Cisagov: Six Auth Bypass and Privilege Escalation Flaws Disclosed Together
Vypr Intelligence · Sep 15, 2026
Digital Watchdog VMAX DVR and NVR Product Lineups
CISA ICS Advisories

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000