CWE-276 · Incorrect Default Permissions

1544 CVEs classified under CWE-276 (Incorrect Default Permissions). Browse by severity and year.

Top CVEs for CWE-276
CVESeverityScorePublishedSummary
CVE-2022-42150Critical10.02023-10-19TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default configuration could cause Container Escape.
CVE-2020-29492Critical10.02021-01-04Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit th…
CVE-2020-29491Critical10.02021-01-04Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit th…
CVE-2025-40585Critical9.92025-06-10A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow…
CVE-2023-22651Critical9.92023-05-04Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead…
CVE-2019-19896Critical9.92020-01-23In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share o…
CVE-2020-37129Critical9.82026-02-05Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can…
CVE-2025-60262Critical9.82026-01-06An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsft…
CVE-2024-43166Critical9.82025-09-03Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to up…
CVE-2025-8031Critical9.82025-07-22The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability…
CVE-2014-7210Critical9.82025-06-26pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backen…
CVE-2025-6179Critical9.82025-06-16Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and ac…
CVE-2025-4660Critical9.82025-05-13A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is acc…
CVE-2025-30465Critical9.82025-03-31A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5…
CVE-2025-24238Critical9.82025-03-31A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7…
CVE-2025-24207Critical9.82025-03-31A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app ma…
CVE-2025-24195Critical9.82025-03-31An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user…
CVE-2025-24172Critical9.82025-03-31A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "…
CVE-2025-25535Critical9.82025-03-26HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request.
CVE-2024-53351Critical9.82025-03-21Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.
All CVEs classified under CWE-276 — newest first (page 1 of 16)
CVESeverityScorePublishedSummary
CVE-2026-19893Low3.12026-08-15A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipula…
CVE-2026-19841Low3.12026-08-14A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation c…
CVE-2026-63425High7.82026-08-13During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authentic…
CVE-2025-52640Medium4.72026-08-13HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes shar…
CVE-2026-65940Medium6.82026-08-12In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.
CVE-2026-48790Medium5.52026-08-11Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to `settings.js…
CVE-2026-59119High7.32026-08-11Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2025-619702026-08-11Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resu…
CVE-2025-485052026-08-11Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentia…
CVE-2026-210742026-08-10Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.
CVE-2026-4793High7.32026-08-03An incorrect default permissions vulnerability in Synology Assistant before 7.0.7-50095 allows local users to read or write arbitrary files and conduct denial-…
CVE-2026-39875High7.82026-07-27A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious…
CVE-2026-39874High7.82026-07-27A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious…
CVE-2026-17497High8.32026-07-26NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default deskto…
CVE-2026-16247High7.32026-07-20In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData…
CVE-2026-16246High7.32026-07-20In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control o…
CVE-2024-58356Medium6.32026-07-18SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. B…
CVE-2023-54366High8.82026-07-18SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explici…
CVE-2026-40952High7.82026-07-15CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local ac…
CVE-2026-618282026-07-15Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module f…
CVE-2026-53657High8.22026-07-10Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbit…
CVE-2025-274642026-07-09[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose…
CVE-2025-274632026-07-09[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expose…
CVE-2025-274622026-07-09[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The Windows PV drivers expos…
CVE-2026-57895High7.82026-07-08Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which r…
CVE-2026-57919High7.82026-06-29PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENERIC_READ and GENERIC…
CVE-2026-57924Medium4.32026-06-26In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details
CVE-2026-48935Low3.32026-06-26A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`. This vulnera…
CVE-2026-48725High8.12026-06-24Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp allows terminal output to request access…
CVE-2026-56301Medium5.52026-06-23Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abstract-namesp…
CVE-2026-126022026-06-22Incorrect default permissions in ArubaSign, affecting versions prior to v4.6.6. The vulnerability is caused by the assignment of inappropriate permissions duri…
CVE-2026-12823Low3.32026-06-22A security flaw has been discovered in Browserbase Skills up to 20260526. This impacts an unknown function of the component Autobrowse Trace Artifact Handler…
CVE-2026-53870Medium5.52026-06-17Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history…
CVE-2025-156422026-06-17Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing th…
CVE-2026-50255Medium6.72026-06-16Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier. If this vulnerability is exploited, arbitrary code m…
CVE-2026-11931Medium5.52026-06-15Incorrect default permissions in Kiro IDE on macOS and Linux before version 0.11.133 could expose the authentication token cache file to other local users or p…
CVE-2026-49157High8.82026-06-01Incorrect Default Permissions vulnerability in Apache ActiveMQ. This issue affects Apache ActiveMQ: before 5.19.7, from 6.0.0 before 6.2.6. The default Jolok…
CVE-2026-48191Low3.52026-06-01An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowle…
CVE-2026-48190Low3.52026-06-01An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI info…
CVE-2026-335902026-05-28Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authen…
CVE-2026-49237High7.82026-05-28An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 up…
CVE-2026-44469High7.82026-05-26The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileg…
CVE-2026-44468High7.82026-05-26The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to m…
CVE-2018-25359High8.42026-05-25Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying…
CVE-2025-32749Medium5.32026-05-22Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with rem…
CVE-2026-8487Medium6.52026-05-20Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data. This issue affects MOVEit Automati…
CVE-2026-47107High8.12026-05-19Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read…
CVE-2025-485162026-05-15Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotec…
CVE-2026-04322026-05-15Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arb…
CVE-2025-485122026-05-15Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privi…
CVE-2026-27680Low3.12026-05-14Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS)…
CVE-2026-36742Medium6.82026-05-13Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode).
CVE-2026-21015Medium5.52026-05-13Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
CVE-2026-207182026-05-12Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications may allow an escal…
CVE-2026-41712High7.52026-05-12Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.
CVE-2026-45393High7.82026-05-12A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT AUTHORITY\SYSTEM. Incorrect defaul…
CVE-2026-05392026-04-22Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the servi…
CVE-2026-6823High8.22026-04-21HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permit…
CVE-2026-6819High8.82026-04-21HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin enable, /plugin disable, and /reload-plugin…
CVE-2026-39454High7.82026-04-20SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-admini…
CVE-2026-30811Medium6.52026-04-13Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800
CVE-2026-21013Medium5.52026-04-13Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.
CVE-2026-25203High7.82026-04-10Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.
CVE-2025-58713Medium6.42026-04-08A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created…
CVE-2025-57854Medium6.42026-04-08A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images. This issue stems from the /etc/passwd file being created wit…
CVE-2025-57853Medium6.42026-04-08A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable pe…
CVE-2025-57851Medium6.42026-04-08A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created…
CVE-2025-57847Medium6.42026-04-08A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with g…
CVE-2025-7024High7.32026-04-03Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbi…
CVE-2026-21765High8.82026-04-02HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows host machine might…
CVE-2026-34450Medium4.42026-03-31The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory…
CVE-2025-15615Medium5.82026-03-27Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerab…
CVE-2026-32983Medium5.82026-03-27Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerab…
CVE-2026-0748Medium4.32026-03-26In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" p…
CVE-2026-32680High7.82026-03-26The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-de…
CVE-2026-24063High8.22026-03-18When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written…
CVE-2016-20029Medium6.22026-03-16ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrie…
CVE-2025-8766Medium6.42026-03-13A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created wit…
CVE-2025-57849Medium6.42026-03-13A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permission…
CVE-2026-3315High7.82026-03-10Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Vis…
CVE-2026-26131High7.82026-03-10Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-28267Medium5.52026-03-10Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup d…
CVE-2026-28727High7.82026-03-06Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, A…
CVE-2026-28717Medium5.02026-03-06Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-26034High7.82026-03-05UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to e…
CVE-2026-21423Medium6.72026-03-04Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privi…
CVE-2026-2915High7.12026-03-03HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP S…
CVE-2026-27653Medium6.72026-02-27The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be…
CVE-2026-23703High7.82026-02-26The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute…
CVE-2025-1789High7.82026-02-24Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileg…
CVE-2026-2026Medium6.12026-02-13A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially per…
CVE-2025-36522Medium6.72026-02-10Incorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668 or later. within Ring 3: User Applications may allow an escalat…
CVE-2025-36511Medium6.72026-02-10Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privil…
CVE-2025-32453Medium6.72026-02-10Incorrect default permissions for some Intel(R) Graphics Driver software within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged s…
CVE-2025-31655Medium6.72026-02-10Incorrect default permissions for some Intel(R) Battery Life Diagnostic Tool within Ring 3: User Applications may allow an escalation of privilege. Unprivilege…
CVE-2025-22849Medium6.72026-02-10Incorrect default permissions for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00…
CVE-2026-25931High7.82026-02-09vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings._determineIsTrusted treats the configu…
CVE-2020-37160Medium6.22026-02-07SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local…
CVE-2025-15343Medium6.52026-02-05Tanium addressed an incorrect default permissions vulnerability in Enforce.
CVE-2025-15341Medium6.52026-02-05Tanium addressed an incorrect default permissions vulnerability in Benchmark.