agentprime: CWE-280

CVE-2026-80301: Avast sandbox escape via unpreserved COM pathway through Task Scheduler

Fri, 06 Nov 2026 16:01:42 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20599: In Modem, there is a possible escalation of privilege due to a missing permission check.

Mon, 02 Nov 2026 02:34:17 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20577: In Modem, there is a possible permission bypass due to a permissions bypass.

Mon, 02 Nov 2026 02:33:52 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3322: Privilege escalation via request replaying in Lobster_pro

Mon, 26 Oct 2026 14:41:12 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63792: Gitea private reusable workflow disclosure to fork runs

Wed, 14 Oct 2026 14:29:01 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21121: Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.

Mon, 12 Oct 2026 04:57:37 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-79403: An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint

Tue, 29 Sep 2026 00:00:00 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56729: Zammad: Titles of knowledge base answers will be shown across all categories via the global search

Fri, 25 Sep 2026 16:58:05 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96872: WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions

Wed, 23 Sep 2026 18:50:13 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90462: Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

Tue, 22 Sep 2026 15:50:00 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54471: Dell SmartFabric Manager: Dell SmartFabric Manager, versions prior to 2.2.1…

Thu, 17 Sep 2026 14:54:15 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1759: Secomea GateManager: Improper handling of insufficient permissions or privileges vulnerability in Secomea…

Tue, 15 Sep 2026 10:54:38 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-84631: This issue was addressed with additional entitlement checks.

Mon, 14 Sep 2026 20:51:57 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-64701: A permissions issue was addressed with additional restrictions.

Mon, 14 Sep 2026 20:51:41 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-86917: A permissions issue was addressed with additional restrictions.

Mon, 14 Sep 2026 20:49:34 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-43786: This issue was addressed with additional entitlement checks.

Mon, 14 Sep 2026 20:49:10 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21099: Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

Wed, 09 Sep 2026 04:47:47 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69907: Windows Enterprise App Management Elevation of Privilege Vulnerability

Tue, 08 Sep 2026 17:16:38 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59567: Local privilege escalation

Mon, 24 Aug 2026 13:41:38 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Wagtail: Improper restriction handling on Page translation API endpoint

Thu, 20 Aug 2026 18:45:27 GMT

wagtail <7.0.9 || >=7.1rc1, <7.3.4 || >=7.4rc1, <7.4.3 || >=8.0rc1, <8.0rc2, fixed in 7.0.9, 7.3.4, 7.4.3, 8.0rc2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Improper permission handling when copying snippets

Thu, 20 Aug 2026 18:45:23 GMT

wagtail <7.0.9 || >=7.1, <7.3.4 || >=7.4, <7.4.3 || >=8.0rc1, <8.0rc2, fixed in 7.0.9, 7.3.4, 7.4.3, 8.0rc2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Improper restriction handling on descendant collections in Documents and Images API

Thu, 20 Aug 2026 18:45:14 GMT

wagtail <7.0.9 || >=7.1, <7.3.4 || >=7.4, <7.4.3 || >=8.0rc1, <8.0rc2, fixed in 7.0.9, 7.3.4, 7.4.3, 8.0rc2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Identification of documents by SHA1 hash

Thu, 20 Aug 2026 18:45:09 GMT

wagtail <7.0.9 || >=7.1, <7.3.4 || >=7.4, <7.4.3 || >=8.0rc1, <8.0rc2, fixed in 7.0.9, 7.3.4, 7.4.3, 8.0rc2. CVSS 3.7 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Improper restriction handling on Pages admin API

Thu, 20 Aug 2026 18:42:25 GMT

wagtail <7.0.9 || >=7.1, <7.3.4 || >=7.4, <7.4.3 || >=8.0rc1, <8.0rc2, fixed in 7.0.9, 7.3.4, 7.4.3, 8.0rc2. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Pages translations can be created without page permissions when using simple_translation

Thu, 20 Aug 2026 18:40:22 GMT

wagtail <7.0.8 || >=7.1, <7.3.3 || >=7.4, <7.4.2, fixed in 7.0.8, 7.3.3, 7.4.2. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Improper permission handling in image preview

Thu, 20 Aug 2026 18:40:18 GMT

wagtail <7.0.8 || >=7.1, <7.3.3 || >=7.4, <7.4.2, fixed in 7.0.8, 7.3.3, 7.4.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail: Improper restriction handling on Documents and Images chosen endpoints

Thu, 20 Aug 2026 18:40:09 GMT

wagtail <7.0.8 || >=7.1, <7.3.3 || >=7.4, <7.4.2, fixed in 7.0.8, 7.3.3, 7.4.2. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-73239: Apache Allura: Missing permission checks IDOR

Wed, 12 Aug 2026 16:41:41 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Wed, 12 Aug 2026 15:14:47 GMT

winter/wn-cms-module <1.2.13, fixed in 1.2.13. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-18860: Velociraptor incorrect Org deletion permissions check

Tue, 11 Aug 2026 14:52:55 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11804: Program Module Vulnerability

Thu, 23 Jul 2026 15:07:42 GMT

CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Gitea: Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Tue, 21 Jul 2026 20:40:03 GMT

gitea.dev <1.27.0, fixed in 1.27.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-62393: Apache Kylin: Improper authorization in job information retrieval

Tue, 14 Jul 2026 12:19:27 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45196: GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel

Fri, 10 Jul 2026 20:53:50 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20463: In Modem, there is a possible escalation of privilege due to a permissions bypass.

Wed, 01 Jul 2026 03:14:06 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45195: GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted

Fri, 26 Jun 2026 15:18:20 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-41566: Apache Kvrocks: Improper permission for the APPLYBATCH command

Thu, 25 Jun 2026 08:04:25 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40371: Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability

Tue, 09 Jun 2026 17:05:19 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-11764: Data exposed without proper permission

Tue, 09 Jun 2026 11:54:37 GMT

CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-10549: Privilege escalation in Yandex Database

Tue, 02 Jun 2026 08:27:06 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Keycloak Vulnerable to Improper Handling of Insufficient Permissions or Privilege

Thu, 28 May 2026 06:31:09 GMT

org.keycloak:keycloak-services >=26.5.0, <26.6.3 || <=26.4.7, fixed in 26.6.3. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-46054: selinux: fix overlayfs mmap() and mprotect() access checks

Wed, 27 May 2026 12:57:12 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2340: Samba: vfs_worm does not block directory modification

Wed, 27 May 2026 12:09:32 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Wagtail has improper permission handling when copying pages

Fri, 08 May 2026 20:23:11 GMT

wagtail <7.0.7 || >=7.1, <7.3.2, fixed in 7.0.7, 7.3.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail has improper restriction handling on Documents and Images API

Fri, 08 May 2026 20:21:38 GMT

wagtail <7.0.7 || >=7.1, <7.3.2, fixed in 7.0.7, 7.3.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail has improper permission handling when deleting form submissions

Fri, 08 May 2026 20:20:12 GMT

wagtail <7.0.7 || >=7.1, <7.3.2, fixed in 7.0.7, 7.3.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail has improper permission handling when viewing page history

Fri, 08 May 2026 20:19:08 GMT

wagtail <7.0.7 || >=7.1, <7.3.2, fixed in 7.0.7, 7.3.2. CVSS 4.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Wagtail has improper permission handling when comparing revisions

Fri, 08 May 2026 20:17:31 GMT

wagtail <7.0.7 || >=7.1, <7.3.2, fixed in 7.0.7, 7.3.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-6805: Vulnerability on Cryptobox external sharing feature

Thu, 07 May 2026 09:45:42 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20448: In geniezone, there is a possible escalation of privilege due to a missing permission check.

Mon, 04 May 2026 05:41:52 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.