CWE-278 · Insecure Preserved Inherited Permissions
6 CVEs classified under CWE-278 (Insecure Preserved Inherited Permissions). Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6265 | High | 8.8 | 2026-04-27 | Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus F… |
CVE-2024-36538 | High | 8.8 | 2024-07-24 | Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. |
CVE-2024-37769 | High | 8.8 | 2024-07-05 | Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request. |
CVE-2023-38497 | High | 7.9 | 2023-08-04 | Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not res… |
CVE-2025-2947 | High | 7.2 | 2025-04-17 | IBM i 7.6 contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate… |
CVE-2024-38531 | Low | 3.6 | 2024-06-28 | Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change… |