CVE-2026-106602

MEDIUM NVD

CVSS Score 4.8

Severity MEDIUM

Published Oct 09, 2026

Vendor unknown

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.

References

https://patchstack.com/database/wordpress/plugin/jetpack/vulnerability/wordpress-jetpack-plugin-16-2-broken-authentication-vulnerability?_s_id=cve