CWE-266 · Incorrect Privilege Assignment

1062 CVEs classified under CWE-266 (Incorrect Privilege Assignment). Browse by severity and year.

Top CVEs for CWE-266
CVESeverityScorePublishedSummary
CVE-2026-23800Critical10.02026-01-16Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0.
CVE-2025-41115Critical10.02025-11-21SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing…
CVE-2026-42368Critical9.92026-05-04A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP request can lead to…
CVE-2026-32922Critical9.92026-03-29OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens w…
CVE-2026-22907Critical9.92026-01-15An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.
CVE-2025-62645Critical9.92025-10-17The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative pr…
CVE-2025-10725Critical9.92025-09-30A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a st…
CVE-2025-54049Critical9.92025-08-20Incorrect Privilege Assignment vulnerability in miniOrange Custom API for WP custom-api-for-wp allows Privilege Escalation.This issue affects Custom API for WP…
CVE-2025-26512Critical9.92025-03-24SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin…
CVE-2019-10940Critical9.92020-01-16A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid ses…
CVE-2026-72826Critical9.82026-08-14The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiK…
CVE-2026-72839Critical9.82026-08-13filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated at…
CVE-2026-66424Critical9.82026-08-13Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
CVE-2026-66662Critical9.82026-08-06Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
CVE-2026-65507Critical9.82026-08-06Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
CVE-2026-61951Critical9.82026-07-23Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.
CVE-2026-59540Critical9.82026-07-23Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.
CVE-2026-57813Critical9.82026-07-13Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <…
CVE-2026-57692Critical9.82026-07-01Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.
CVE-2026-56033Critical9.82026-06-26Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.
All CVEs classified under CWE-266 — newest first (page 1 of 11)
CVESeverityScorePublishedSummary
CVE-2026-19841Low3.12026-08-14A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation c…
CVE-2026-19835Low3.82026-08-14A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletio…
CVE-2026-72826Critical9.82026-08-14The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiK…
CVE-2026-72840High8.82026-08-13OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for m…
CVE-2026-72839Critical9.82026-08-13filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated at…
CVE-2026-58435Medium5.42026-08-13Gitea LFS Deploy-Key Privilege Escalation
CVE-2026-66661High7.72026-08-13Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.
CVE-2026-66424Critical9.82026-08-13Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
CVE-2026-61979High8.12026-08-13Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.
CVE-2026-28161High8.82026-08-13Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
CVE-2026-27543High8.12026-08-13Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
CVE-2025-9486Low3.32026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain condi…
CVE-2026-646392026-08-12Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary…
CVE-2026-71468Medium5.32026-08-11A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all su…
CVE-2026-18621High7.62026-08-10A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Wor…
CVE-2026-15467High8.12026-08-10A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configurin…
CVE-2026-19381High7.82026-08-10A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSF…
CVE-2026-19376High7.32026-08-10A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the co…
CVE-2026-19360Medium4.72026-08-09A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunction of the component Lambda Function Hand…
CVE-2026-19359Medium4.72026-08-09A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component…
CVE-2026-19358Medium6.32026-08-09A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes impro…
CVE-2026-19244Medium4.72026-08-07A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of t…
CVE-2026-19195High7.82026-08-07A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Ke…
CVE-2026-19193High7.82026-08-07A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Exec…
CVE-2026-19192High7.82026-08-07A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCo…
CVE-2026-19191High7.82026-08-07A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\D…
CVE-2026-19190High7.82026-08-07A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scan…
CVE-2026-19189High7.82026-08-07A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\…
CVE-2026-66662Critical9.82026-08-06Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
CVE-2026-65559High7.22026-08-06Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.
CVE-2026-65507Critical9.82026-08-06Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
CVE-2026-28111High8.82026-08-06Contributor Privilege Escalation in Forminator <= 1.56.0 versions.
CVE-2026-19007Medium6.32026-08-06A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedElevatedSender of the file src/auto-reply/…
CVE-2026-19005Medium6.32026-08-06A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent…
CVE-2026-18998Medium6.32026-08-06A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the c…
CVE-2026-18996Medium6.32026-08-06A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of t…
CVE-2026-18993Medium6.32026-08-06A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/model_too…
CVE-2026-18976Medium6.32026-08-06A vulnerability was determined in NousResearch hermes-agent up to 0.16.0. This impacts the function get_tool_definitions of the file agent/agent_init.py of the…
CVE-2026-20028Medium5.02026-08-05A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are asso…
CVE-2026-17626High8.82026-08-05IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP serve…
CVE-2026-10059Critical9.12026-08-05A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this…
CVE-2026-18817Low2.22026-08-04A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/sr…
CVE-2026-18723Medium6.32026-08-04A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-sta…
CVE-2026-18720Medium5.32026-08-04A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the compone…
CVE-2026-18606High7.82026-08-03A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86…
CVE-2026-18584Medium5.42026-08-03A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /…
CVE-2026-527912026-07-29fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in…
CVE-2026-17434Medium6.32026-07-26A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the compone…
CVE-2026-17433Medium5.32026-07-26A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts…
CVE-2026-17432Medium5.02026-07-26A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins…
CVE-2026-16764Medium6.32026-07-23A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/api_v2/serializers.py of the compone…
CVE-2026-61951Critical9.82026-07-23Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.
CVE-2026-59541High8.82026-07-23Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.
CVE-2026-59540Critical9.82026-07-23Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.
CVE-2026-47237High8.02026-07-21Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on…
CVE-2026-21824High8.82026-07-20HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorize…
CVE-2026-16224Medium4.32026-07-19A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component A…
CVE-2026-16199Medium6.32026-07-19A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialed…
CVE-2026-16121Medium6.32026-07-18A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file internal/tools/exec_approval.go. The man…
CVE-2026-505622026-07-15FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull reque…
CVE-2026-15594Low3.72026-07-13A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the library src/lib/media/hash.ts of the com…
CVE-2026-57813Critical9.82026-07-13Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <…
CVE-2026-57768High8.22026-07-13Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Lo…
CVE-2026-57410High8.82026-07-13Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a t…
CVE-2026-57386High8.82026-07-13Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.
CVE-2026-15510Medium6.32026-07-12A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper aut…
CVE-2026-15509Medium6.32026-07-12A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the…
CVE-2026-15499Medium6.32026-07-12A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/cron_tools…
CVE-2026-15476Medium5.32026-07-12A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the compon…
CVE-2026-15475Medium5.32026-07-12A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component…
CVE-2026-15474Medium4.32026-07-12A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Impacted is an unknown function of the file /callrec/audio.jsp of the component Ca…
CVE-2026-15473Medium6.32026-07-12A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This issue affects some unknown processing of the file /callrec/restoreCallAction.do of…
CVE-2026-15472Medium4.32026-07-12A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/composeEmailAction.do. Exe…
CVE-2026-15471Medium4.32026-07-12A vulnerability was found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/pci_dss_status.jsp. Performing a manipulat…
CVE-2026-15470Medium4.32026-07-12A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Su…
CVE-2026-15377Medium4.32026-07-10A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlog…
CVE-2026-15376Medium6.32026-07-10A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/statisticReportAction.do. The manipulat…
CVE-2026-15375Medium4.32026-07-10A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users_ldap.jsp of the component L…
CVE-2026-15374Medium6.32026-07-10A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/roleAddAction.do of the component Group In…
CVE-2026-15373Medium6.32026-07-10A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file /callrec/userAddAction.do. Perfor…
CVE-2026-15319High7.32026-07-10A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the file web/backend/middleware/access_cont…
CVE-2026-57501Unrated2026-07-09Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-…
CVE-2026-15271High7.52026-07-09A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue i…
CVE-2026-15270High7.52026-07-09A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf o…
CVE-2026-15188Medium6.32026-07-09A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the functio…
CVE-2026-33390High8.12026-07-09An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authentica…
CVE-2026-26053Medium5.32026-07-07An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some…
CVE-2026-14794Medium4.32026-07-06A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData of the file src/controllers/ChartsContr…
CVE-2026-14792Medium6.52026-07-06A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the com…
CVE-2026-14778High7.32026-07-06A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax…
CVE-2026-14719High7.32026-07-05A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.ph…
CVE-2026-14693Medium5.42026-07-05A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the f…
CVE-2026-14690High7.32026-07-05A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Us…
CVE-2026-59093High8.82026-07-02Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. The assignRoleTo…
CVE-2026-5136High8.82026-07-01A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an…
CVE-2026-57692Critical9.82026-07-01Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.
CVE-2026-53902Medium6.52026-07-01MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership endpoint. An authenticated user can mo…
CVE-2026-56247High8.82026-06-30Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compatibility, including to pending invitees…
CVE-2026-4629Medium6.52026-06-30A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper int…
CVE-2026-12388Medium6.52026-06-30A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from external services is mapped to…