Advisories · Weakness

CWE-272.

Every Advisory and CVE whose sources give the weakness CWE-272, newest first.

CVE-2026-91894 CVE record

CVSS 6.7 Medium

Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0…
- Dell Alienware Command Center (AWCC)
- CWE-272
Not analysed yet 2 Nov 2026
CVE-2026-81452 CVE record

CVSS 7.0 High

Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0…
- Dell Alienware Command Center (AWCC)
- CWE-272
Not analysed yet 16 Oct 2026
CVE-2026-106589 CVE record

CVSS 2.9 Low

OpenBSD OpenSSH: In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer…
- OpenBSD OpenSSH
- CWE-272
Not analysed yet 6 Oct 2026
CVE-2026-103504 CVE record

CVSS 8.1 High

Gitea API team demotion not applied to unit permissions
- Gitea
- CWE-272
Not analysed yet 6 Oct 2026
CVE-2026-79693 CVE record

CVSS 3.4 Low

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability.
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- CWE-272
Not analysed yet 9 Sept 2026
CVE-2026-79944 CVE record

CVSS 3.4 Low

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability.
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- CWE-272
Not analysed yet 9 Sept 2026
CVE-2025-62299 CVE record

CVSS 6.6 Medium

HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
- HCL Software IEM
- CWE-272
Not analysed yet 20 Aug 2026
CVE-2026-59915 CVE record

CVSS 7.3 High

Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0…
- Dell Alienware Command Center (AWCC)
- CWE-272
Not analysed yet 18 Aug 2026
CVE-2026-49500 CVE record

CVSS 6.0 Medium

Dell Alienware Command Center (AWCC: Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0…
- Dell Alienware Command Center (AWCC
- CWE-272
Not analysed yet 18 Aug 2026
CVE-2026-15271 CVE record

CVSS 7.7 High

TOTOLINK EX200 Web boa.conf least privilege violation
- TOTOLINK A3000RU
- TOTOLINK A3100R
- Privilege escalation
- CWE-272
Not analysed yet 9 Jul 2026
CVE-2026-15270 CVE record

CVSS 7.7 High

D-link DIR-823G Web boa.conf least privilege violation
- D-link DIR-823G
- Privilege escalation
- CWE-272
Not analysed yet 9 Jul 2026
kozou +3 npm

CVSS 4.0, no score published

Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure)
- Denial of service
- CWE-272
<1.8.1 · fixed in 1.8.1

GHSA-v52w-28xh-v562 Not analysed yet 19 Jun 2026
io.strimzi:strimzi Maven

CVSS 5.4 Medium

Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator
- Privilege escalation
- CWE-272
<1.0.1 · fixed in 1.0.1

GHSA-r427-j2h7-wv3m · CVE-2026-55226 Not analysed yet 18 Jun 2026
CVE-2026-11620 CVE record

CVSS 6.9 Medium

TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation
- TOTOLINK EX200
- Privilege escalation
- CWE-272
Not analysed yet 9 Jun 2026
CVE-2026-11555 CVE record

CVSS 6.3 Medium

D-Link DGS-1100-08PD Web boa.conf least privilege violation
- D-Link DGS-1100-08PD
- Privilege escalation
- CWE-272
Not analysed yet 8 Jun 2026
CVE-2026-11554 CVE record

CVSS 5.3 Medium

TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation
- TOTOLINK CP450
- Privilege escalation
- CWE-272
Not analysed yet 8 Jun 2026
CVE-2026-11497 CVE record

CVSS 6.9 Medium

D-Link DCS-5615 Boa Webserver boa.conf least privilege violation
- D-Link DCS-5615
- Privilege escalation
- CWE-272
Not analysed yet 8 Jun 2026
CVE-2026-11494 CVE record

CVSS 5.3 Medium

TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation
- TOTOLINK AC1200 T8
- Privilege escalation
- CWE-272
Not analysed yet 8 Jun 2026
CVE-2026-11492 CVE record

CVSS 5.3 Medium

D-Link DIR-823G vsftpd vsftpd.conf least privilege violation
- D-Link DIR-823G
- Privilege escalation
- CWE-272
Not analysed yet 8 Jun 2026
CVE-2026-39459 CVE record

CVSS 8.6 High

iControl REST and tmsh vulnerability
- F5 BIG-IP
- CWE-272
Not analysed yet 13 May 2026
CVE-2026-32655 CVE record

CVSS 5.3 Medium

Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0…
- Dell Alienware Command Center (AWCC)
- CWE-272
Not analysed yet 27 Apr 2026
CVE-2026-35535 CVE record

CVSS 7.4 High

Sudo: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid…
- Sudo
- CWE-271
- CWE-272
Not analysed yet 3 Apr 2026
CVE-2025-9711 CVE record

CVSS 8.5 High

Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
- Brocade Fabric OS
- CWE-272
Not analysed yet 3 Feb 2026
CVE-2025-59106 CVE record

CVSS 8.8 High

Web Server Running with Root Privileges in dormakaba access manager
- dormakaba Access Manager 92xx-k7
- CWE-272
Not analysed yet 26 Jan 2026
pepr npm

CVSS 0.0 None

Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode
- Broken access control
- CWE-272
<1.0.5 · fixed in 1.0.5

GHSA-w54x-r83c-x79q · CVE-2026-23634 Not analysed yet 15 Jan 2026
CVE-2025-68267 CVE record

CVSS 6.5 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing…
- JetBrains TeamCity
- CWE-272
Not analysed yet 16 Dec 2025
CVE-2025-8758 CVE record

CVSS 7.3 High

TRENDnet TEW-822DRE vsftpd least privilege violation
- TRENDnet TEW-822DRE
- Privilege escalation
- CWE-272
Not analysed yet 9 Aug 2025
CVE-2025-8757 CVE record

CVSS 7.3 High

TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation
- TRENDnet TV-IP110WN
- Privilege escalation
- CWE-272
Not analysed yet 9 Aug 2025
CVE-2025-8181 CVE record

CVSS 8.6 High

TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
- TOTOLINK N600R
- TOTOLINK X2000R
- Privilege escalation
- CWE-272
Not analysed yet 26 Jul 2025
CVE-2025-7722 CVE record

CVSS 8.8 High

Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation
- steverio Social Streams
- CWE-272
Not analysed yet 23 Jul 2025
CVE-2025-1384 CVE record

CVSS 7.0 High

Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
- OMRON Corporation Machine Automation Controller NJ-series
- OMRON Corporation Machine Automation Controller NX-series
- CWE-272
Not analysed yet 13 Jul 2025
CVE-2025-49144 CVE record

CVSS 7.3 High

Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path
- notepad-plus-plus
- Broken access control
- CWE-272
Not analysed yet 23 Jun 2025
CVE-2025-47809 CVE record

CVSS 8.2 High

Wibu CodeMeter: Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after…
- Wibu CodeMeter
- CWE-272
Not analysed yet 16 May 2025
CVE-2024-55954 CVE record

CVSS 8.7 High

OpenObserve Improper Authorization Allows Admin User to Remove Root User
- openobserve
- Privilege escalation
- Broken access control
Not analysed yet 16 Jan 2025
CVE-2024-28829 CVE record

CVSS 5.2 Medium

Privilege escalation in mk_informix plugin
- Checkmk
- CWE-272
- CWE-807
Not analysed yet 20 Aug 2024
CVE-2024-27165 CVE record

CVSS 7.8 High

Local Privilege Escalation
- Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
- CWE-272
Not analysed yet 14 Jun 2024
CVE-2024-35204 CVE record

CVSS 8.4 High

Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users can conduct attacks.
- CWE-272
Not analysed yet 13 May 2024
CVE-2024-28824 CVE record

CVSS 8.8 High

Privilege escalation in mk_informix plugin
- Checkmk
- CWE-272
- CWE-807
Not analysed yet 22 Mar 2024
CVE-2024-0638 CVE record

CVSS 8.2 High

Privilege escalation in mk_oracle plugins
- Checkmk
- CWE-272
Not analysed yet 22 Mar 2024
CVE-2024-0798 CVE record

CVSS 8.1 High

Privilege Escalation in mintplex-labs/anything-llm
- mintplex-labs/anything-llm
- CWE-272
Not analysed yet 25 Feb 2024
CVE-2024-24830 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

OpenObserve Privilege Escalation Vulnerability in Users API
- openobserve
- Privilege escalation
- Broken access control
Not analysed yet 8 Feb 2024
CVE-2024-25106 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OpenObserve Unauthorized Access Vulnerability in Users API
- openobserve
- Privilege escalation
- Broken access control
Not analysed yet 8 Feb 2024
CVE-2023-32451 CVE record

CVSS 7.3 High

Dell Display Manager: Dell Display Manager application, version 2.1.1.17…
- Dell Display Manager
- CWE-272
Not analysed yet 6 Feb 2024
CVE-2023-28047 CVE record

CVSS 7.3 High

Dell Display Manager: Dell Display Manager, versions 2.1.0 and prior…
- Dell Display Manager
- CWE-272
Not analysed yet 20 Apr 2023
CVE-2023-28046 CVE record

CVSS 6.6 Medium

Dell Display Manager: Dell Display Manager, versions 2.1.0 and prior…
- Dell Display Manager
- CWE-272
Not analysed yet 6 Apr 2023
CVE-2021-26726 CVE record

CVSS 8.8 High

Remote code execution in Valmet DNA before Collection 2021
- Valmet DNA
- Command injection
- Information disclosure
Not analysed yet 16 Feb 2022