CWE-278 · Insecure Preserved Inherited Permissions

7 CVEs classified under CWE-278 (Insecure Preserved Inherited Permissions). Browse by severity and year.

Top CVEs for CWE-278
CVESeverityScorePublishedSummary
CVE-2026-6265High8.82026-04-27Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus F…
CVE-2024-36538High8.82024-07-24Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVE-2024-37769High8.82024-07-05Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
CVE-2023-38497High7.92023-08-04Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not res…
CVE-2025-2947High7.22025-04-17IBM i 7.6  contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command.  A malicious actor can use the command to elevate…
CVE-2026-71477Medium6.72026-08-18mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and pa…
CVE-2024-38531Low3.62024-06-28Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change…
All CVEs classified under CWE-278 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-71477Medium6.72026-08-18mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and pa…
CVE-2026-6265High8.82026-04-27Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus F…
CVE-2025-2947High7.22025-04-17IBM i 7.6  contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command.  A malicious actor can use the command to elevate…
CVE-2024-36538High8.82024-07-24Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
CVE-2024-37769High8.82024-07-05Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request.
CVE-2024-38531Low3.62024-06-28Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change…
CVE-2023-38497High7.92023-08-04Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not res…