CVE-2026-20685Medium· 6.5▾ TwilightPoC availableAn attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 35.8 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.2%
1 GitHub repo
An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.
private_cloud_compute < 5e290.3Upgrade past the affected range:
private_cloud_compute 5e290.3Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-84568High· 7.8A path traversal issue was addressed with improved path validation
CVE-2026-84624Medium· 5.5A permissions issue was addressed with improved path validation
CVE-2026-86910Medium· 5.5A permissions issue was addressed with improved path validation
CVE-2026-86879Medium· 6.5A denial-of-service issue was addressed with improved input validation
CVE-2026-84598High· 7.5A path traversal issue was addressed with improved path validation
CVE-2026-86886Medium· 5.5A path traversal issue was addressed with improved input validation