CVE-2026-109567 | High | 7.2 | 2026-10-12 | Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edi… |
CVE-2026-95837 | High | 7.8 | 2026-10-12 | containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRI… |
CVE-2026-78404 | Medium | 6.5 | 2026-10-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility. |
CVE-2026-105465 | High | 8.8 | 2026-10-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance. |
CVE-2026-105464 | High | 8.8 | 2026-10-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevate… |
CVE-2026-109317 | High | 7.2 | 2026-10-12 | Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing po… |
CVE-2026-85956 | Critical | 9.6 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges… |
CVE-2026-85955 | Critical | 9.9 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery e… |
CVE-2026-85954 | High | 8.6 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQue… |
CVE-2026-85953 | High | 8.5 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently val… |
CVE-2026-85950 | High | 8.4 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with adm… |
CVE-2026-85948 | Critical | 9.9 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package p… |
CVE-2026-85947 | Critical | 9.9 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A… |
CVE-2026-108835 | Medium | 4.4 | 2026-10-12 | A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a m… |
CVE-2026-108825 | Medium | 5.4 | 2026-10-12 | A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such mani… |
CVE-2026-85126 | High | 7.2 | 2026-10-11 | The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privilege… |
CVE-2026-85118 | Critical | 9.8 | 2026-10-11 | The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenti… |
CVE-2026-104680 | High | 7.2 | 2026-10-11 | The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress… |
CVE-2026-103694 | High | 8.8 | 2026-10-11 | The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, a… |
CVE-2026-108506 | Medium | 5.5 | 2026-10-10 | ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces throug… |
CVE-2026-108505 | Low | 3.3 | 2026-10-10 | ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-relate… |
CVE-2026-108504 | Medium | 5.5 | 2026-10-10 | ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can ex… |
CVE-2026-108502 | Low | 3.3 | 2026-10-10 | ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs. |
CVE-2026-94257 | High | 8.1 | 2026-10-10 | The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during it… |
CVE-2026-92975 | High | 8.1 | 2026-10-10 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4… |
CVE-2026-77183 | High | 8.8 | 2026-10-10 | The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and i… |
CVE-2026-104766 | High | 8.8 | 2026-10-10 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up… |
CVE-2026-104725 | High | 8.8 | 2026-10-10 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4… |
CVE-2026-108501 | Medium | 5.7 | 2026-10-10 | ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by refl… |
CVE-2026-107645 | Critical | 9.1 | 2026-10-10 | The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_reg… |
CVE-2026-104022 | Medium | 5.4 | 2026-10-10 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and in… |
CVE-2026-57458 | High | 8.1 | 2026-10-09 | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can call `POST… |
CVE-2025-14123 | Medium | 6.8 | 2026-10-09 | The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving a… |
CVE-2026-93548 | High | 8.8 | 2026-10-09 | The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenti… |
CVE-2026-84245 | High | 7.8 | 2026-10-08 | IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vul… |
CVE-2026-50054 | High | 7.1 | 2026-10-08 | An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local acco… |
CVE-2026-93017 | High | 7.7 | 2026-10-08 | The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceName… |
CVE-2026-107510 | Critical | 9.1 | 2026-10-08 | An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation. |
CVE-2026-103692 | Critical | 9.8 | 2026-10-08 | The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call… |
CVE-2026-94578 | | | 2026-10-08 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration fr… |
CVE-2026-87681 | | | 2026-10-08 | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When proce… |
CVE-2026-76266 | High | 7.7 | 2026-10-07 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterpri… |
CVE-2026-46434 | High | 7.1 | 2026-10-07 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the `gym_trainer` permission can deactivate any account in the… |
CVE-2026-87782 | High | 8.8 | 2026-10-07 | The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile u… |
CVE-2026-106492 | High | 7.6 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper pres… |
CVE-2026-79813 | Medium | 6.7 | 2026-10-06 | A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute… |
CVE-2026-79806 | High | 7.8 | 2026-10-06 | A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user… |
CVE-2026-76748 | High | 8.8 | 2026-10-06 | A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileg… |
CVE-2026-76742 | Critical | 9.8 | 2026-10-06 | Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to… |
CVE-2026-55307 | Medium | 4.4 | 2026-10-06 | In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information di… |
CVE-2026-106296 | Medium | 5.4 | 2026-10-06 | Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system… |
CVE-2026-67269 | Critical | 9.9 | 2026-10-06 | Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule C… |
CVE-2026-105688 | Medium | 6.7 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team ad… |
CVE-2026-105687 | Medium | 4.9 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other th… |
CVE-2026-105678 | Medium | 4.3 | 2026-10-05 | Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to A… |
CVE-2026-58841 | High | 7.8 | 2026-10-05 | In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local esca… |
CVE-2026-28647 | High | 7.8 | 2026-10-05 | In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local es… |
CVE-2026-28641 | High | 7.8 | 2026-10-05 | In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. T… |
CVE-2026-28625 | High | 7.8 | 2026-10-05 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additio… |
CVE-2026-105634 | High | 8.1 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows any project member, including a user wit… |
CVE-2026-104955 | Medium | 5.4 | 2026-10-05 | Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint a… |
CVE-2026-105126 | High | 7.2 | 2026-10-04 | LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing o… |
CVE-2026-97644 | High | 8.8 | 2026-10-03 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all ve… |
CVE-2026-104854 | | | 2026-10-02 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolate… |
CVE-2026-19652 | Critical | 9.8 | 2026-10-02 | The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the `dmem_form_submit_ha… |
CVE-2026-104412 | Medium | 4.3 | 2026-10-02 | Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to ot… |
CVE-2026-15897 | High | 8.8 | 2026-10-02 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is du… |
CVE-2026-27872 | | | 2026-10-01 | - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force).
This issue affects Easy IO FG: before 2.0b52. |
CVE-2026-104018 | High | 8.8 | 2026-10-01 | An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privil… |
CVE-2026-59797 | Critical | 9.8 | 2026-10-01 | Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions.
This issue affects Apache HTTP Serv… |
CVE-2026-95687 | High | 8.8 | 2026-10-01 | The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including… |
CVE-2026-19807 | High | 8.8 | 2026-10-01 | The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is d… |
CVE-2026-15989 | Critical | 9.8 | 2026-10-01 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is du… |
CVE-2026-76145 | | | 2026-10-01 | An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an… |
CVE-2026-102141 | Medium | 6.7 | 2026-09-30 | Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write… |
CVE-2026-102120 | High | 8.8 | 2026-09-30 | A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks d… |
CVE-2026-102113 | High | 7.8 | 2026-09-30 | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on… |
CVE-2026-102112 | High | 7.8 | 2026-09-30 | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on… |
CVE-2026-102093 | High | 7.2 | 2026-09-30 | Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could… |
CVE-2026-53605 | High | 7.8 | 2026-09-30 | Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to ve… |
CVE-2026-102490 | High | 7.8 | 2026-09-30 | Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zamma… |
CVE-2026-75823 | High | 7.4 | 2026-09-30 | The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to… |
CVE-2026-86556 | Medium | 5.3 | 2026-09-30 | There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant… |
CVE-2026-76732 | Medium | 6.4 | 2026-09-29 | A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerabili… |
CVE-2026-76731 | Medium | 6.5 | 2026-09-29 | An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing… |
CVE-2026-102317 | High | 8.6 | 2026-09-29 | Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outs… |
CVE-2026-102710 | | | 2026-09-29 | Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE… |
CVE-2026-102676 | High | 8.3 | 2026-09-29 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an… |
CVE-2026-100824 | High | 8.8 | 2026-09-29 | Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100820 | High | 8.8 | 2026-09-29 | Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F… |
CVE-2026-100807 | High | 8.8 | 2026-09-29 | Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… |
CVE-2026-100801 | High | 8.8 | 2026-09-29 | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… |
CVE-2026-101860 | High | 8.8 | 2026-09-29 | A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file src/RaspAP/Plugin… |
CVE-2026-12269 | High | 8.8 | 2026-09-28 | Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue co… |
CVE-2026-101086 | Medium | 6.5 | 2026-09-27 | Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:wri… |
CVE-2026-89001 | Medium | 4.9 | 2026-09-27 | The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribu… |
CVE-2026-77203 | High | 8.8 | 2026-09-26 | The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due… |
CVE-2026-100686 | High | 8.1 | 2026-09-26 | Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign appli… |
CVE-2026-100620 | Low | 3.8 | 2026-09-26 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an over-permissioned service account in its Android onboarding flow. When onboarding via Googl… |
CVE-2026-100615 | High | 8.8 | 2026-09-26 | Cap-go capgo.app before 12.267.1 fails to validate target API key privilege during rotation, allowing an apikey_manager to rotate a higher-privileged org_super… |