# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper privilege management in Oracle Corporation Oracle Identity Manager](https://agentprime.io/advisories/CVE-2026-60567.md)
  `CVE-2026-60567` · CVE record: Oracle Corporation Oracle Identity Manager · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle WebCenter Portal](https://agentprime.io/advisories/CVE-2026-60566.md)
  `CVE-2026-60566` · CVE record: Oracle Corporation Oracle WebCenter Portal · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-60546.md)
  `CVE-2026-60546` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Identity Manager Connector](https://agentprime.io/advisories/CVE-2026-60532.md)
  `CVE-2026-60532` · CVE record: Oracle Corporation Oracle Identity Manager Connector · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle HTTP Server](https://agentprime.io/advisories/CVE-2026-60530.md)
  `CVE-2026-60530` · CVE record: Oracle Corporation Oracle HTTP Server · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne HCM Foundation](https://agentprime.io/advisories/CVE-2026-60492.md)
  `CVE-2026-60492` · CVE record: Oracle Corporation JD Edwards EnterpriseOne HCM Foundation · CVSS 7.1 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle HTTP Server](https://agentprime.io/advisories/CVE-2026-60454.md)
  `CVE-2026-60454` · CVE record: Oracle Corporation Oracle HTTP Server · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Unified Directory](https://agentprime.io/advisories/CVE-2026-60419.md)
  `CVE-2026-60419` · CVE record: Oracle Corporation Oracle Unified Directory · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Unified Directory](https://agentprime.io/advisories/CVE-2026-60418.md)
  `CVE-2026-60418` · CVE record: Oracle Corporation Oracle Unified Directory · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation TimesTen In-Memory Database](https://agentprime.io/advisories/CVE-2026-60406.md)
  `CVE-2026-60406` · CVE record: Oracle Corporation TimesTen In-Memory Database · CVSS 6.7 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Access Manager](https://agentprime.io/advisories/CVE-2026-60342.md)
  `CVE-2026-60342` · CVE record: Oracle Corporation Oracle Access Manager · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Project Costing](https://agentprime.io/advisories/CVE-2026-60340.md)
  `CVE-2026-60340` · CVE record: Oracle Corporation Oracle Project Costing · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Coherence](https://agentprime.io/advisories/CVE-2026-60271.md)
  `CVE-2026-60271` · CVE record: Oracle Corporation Oracle Coherence · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Coherence](https://agentprime.io/advisories/CVE-2026-60248.md)
  `CVE-2026-60248` · CVE record: Oracle Corporation Oracle Coherence · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation MySQL Server and others](https://agentprime.io/advisories/CVE-2026-60183.md)
  `CVE-2026-60183` · CVE record: Oracle Corporation MySQL Server and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-60175.md)
  `CVE-2026-60175` · CVE record: Oracle Corporation Oracle Database Server · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-60162.md)
  `CVE-2026-60162` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 6.1 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-60150.md)
  `CVE-2026-60150` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-47054.md)
  `CVE-2026-47054` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-47047.md)
  `CVE-2026-47047` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Enterprise Manager Base Platform](https://agentprime.io/advisories/CVE-2026-46995.md)
  `CVE-2026-46995` · CVE record: Oracle Corporation Oracle Enterprise Manager Base Platform · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Gitea LFS Deploy-Key Privilege Escalation](https://agentprime.io/advisories/GHSA-rh79-75qm-gwjr.md)
  `GHSA-rh79-75qm-gwjr`, `CVE-2026-58435`, `GO-2026-6073` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing](https://agentprime.io/advisories/CVE-2026-47237.md)
  `CVE-2026-47237` · CVE record: kubeflow community-distribution · CVSS 8.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup](https://agentprime.io/advisories/CVE-2026-8933.md)
  `CVE-2026-8933` · CVE record: Canonical Ubuntu 26.04 LTS and 2 more · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates](https://agentprime.io/advisories/CVE-2026-15226.md)
  `CVE-2026-15226` · CVE record: Canonical Ubuntu 26.04 LTS and 4 more · CVSS 8.4 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in the Data Loss Prevention component](https://agentprime.io/advisories/CVE-2026-16401.md)
  `CVE-2026-16401` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in WebExtensions](https://agentprime.io/advisories/CVE-2026-16396.md)
  `CVE-2026-16396` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in the DOM: Content Processes component](https://agentprime.io/advisories/CVE-2026-16379.md)
  `CVE-2026-16379` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in the DOM: Content Processes component](https://agentprime.io/advisories/CVE-2026-16372.md)
  `CVE-2026-16372` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-16371.md)
  `CVE-2026-16371` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-16366.md)
  `CVE-2026-16366` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [Privilege escalation in the DOM: Workers component](https://agentprime.io/advisories/CVE-2026-16365.md)
  `CVE-2026-16365` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint](https://agentprime.io/advisories/CVE-2026-13439.md)
  `CVE-2026-13439` · CVE record: hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Privilege escalation
- [@better-auth/sso: SSO provider may allow registration for any org member without a checking their role](https://agentprime.io/advisories/GHSA-gv74-j8m3-fg5f.md)
  `GHSA-gv74-j8m3-fg5f`, `CVE-2026-53515` · npm `@better-auth/sso`: affected `>=1.2.10, <1.6.11`, fixed in `1.6.11` · CVSS 7.1 High · Not analysed yet · Published 20 Jul 2026 · Tags: Privilege escalation, Broken access control
- [NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog](https://agentprime.io/advisories/CVE-2026-55550.md)
  `CVE-2026-55550` · CVE record: pdovhomilja nextcrm-app · CVSS 7.1 High · Not analysed yet · Published 20 Jul 2026 · Tags: Privilege escalation, Broken access control
- [RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint](https://agentprime.io/advisories/CVE-2026-44231.md)
  `CVE-2026-44231` · CVE record: bestpractical rt · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Information disclosure, Privilege escalation, Broken access control
- [Improper privilege management in dotCMS](https://agentprime.io/advisories/CVE-2026-16337.md)
  `CVE-2026-16337` · CVE record: dotCMS dotCMS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Privilege escalation
- [A privilege escalation vulnerability affects HCL Commerce](https://agentprime.io/advisories/CVE-2026-21824.md)
  `CVE-2026-21824` · CVE record: HCLSoftware Commerce · CVSS 8.8 High · Not analysed yet · Published 20 Jul 2026 · Tags: Privilege escalation
- [Apache Syncope: User self-service privilege escalation](https://agentprime.io/advisories/CVE-2026-62183.md)
  `CVE-2026-62183` · CVE record: Apache Software Foundation Apache Syncope · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Privilege escalation
- [Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force](https://agentprime.io/advisories/CVE-2026-13142.md)
  `CVE-2026-13142` · CVE record: Unknown Social Login, Passkeys, Magic Link & Email OTP · CVSS 8.1 High · Not analysed yet · Published 20 Jul 2026 · Tags: Privilege escalation
- [net: skmsg: preserve sg.copy across SG transforms](https://agentprime.io/advisories/CVE-2026-63830.md)
  `CVE-2026-63830` · CVE record: Linux Linux · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2026 · Tags: Privilege escalation
- [jxxghp MoviePilot Application API improper authorization](https://agentprime.io/advisories/CVE-2026-16224.md)
  `CVE-2026-16224` · CVE record: jxxghp MoviePilot · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Privilege escalation, Broken access control
- [nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization](https://agentprime.io/advisories/CVE-2026-16199.md)
  `CVE-2026-16199` · CVE record: nextlevelbuilder GoClaw · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Privilege escalation, Broken access control
- [nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization](https://agentprime.io/advisories/CVE-2026-16121.md)
  `CVE-2026-16121` · CVE record: nextlevelbuilder GoClaw · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Privilege escalation, Broken access control
- [VMware Avi Load Balancer Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-47870.md)
  `CVE-2026-47870` · CVE record: VMware Avi Load Balancer · CVSS 7.1 High · Not analysed yet · Published 18 Jul 2026 · Tags: Privilege escalation
- [VMware Avi Load Balancer Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-47868.md)
  `CVE-2026-47868` · CVE record: VMware Avi Load Balancer · CVSS 7.8 High · Not analysed yet · Published 18 Jul 2026 · Tags: Privilege escalation
- [Local privilege escalation in Symantec ITMS](https://agentprime.io/advisories/CVE-2026-15380.md)
  `CVE-2026-15380` · CVE record: Broadcom Symantec Management Suite · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Privilege escalation
- [Arbitrary File Read as SYSTEM in Symantec ITMS](https://agentprime.io/advisories/CVE-2026-15379.md)
  `CVE-2026-15379` · CVE record: Broadcom Symantec IT Management Suite · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Privilege escalation
- [AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth](https://agentprime.io/advisories/CVE-2026-9810.md)
  `CVE-2026-9810` · CVE record: Unknown AI Copilot · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Privilege escalation
- [User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID](https://agentprime.io/advisories/CVE-2026-11961.md)
  `CVE-2026-11961` · CVE record: Unknown User Registration & Membership · CVSS 8.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: Privilege escalation
- [Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'](https://agentprime.io/advisories/CVE-2026-15982.md)
  `CVE-2026-15982` · CVE record: CodeRevolution Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Privilege escalation
- [Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter](https://agentprime.io/advisories/CVE-2026-14956.md)
  `CVE-2026-14956` · CVE record: Bricksforge Bricksforge · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Privilege escalation
- [ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read](https://agentprime.io/advisories/GHSA-48qw-824m-86pr.md)
  `GHSA-48qw-824m-86pr`, `CVE-2026-65831` · Maven `com.arcadedb:arcadedb-server`: affected `<26.7.1`, fixed in `26.7.1` · CVSS 7.7 High · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation, Broken access control
- [Execution with unnecessary privileges in Lenovo App Store](https://agentprime.io/advisories/CVE-2026-13104.md)
  `CVE-2026-13104` · CVE record: Lenovo App Store · CVSS 7.0 High · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation
- [WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter](https://agentprime.io/advisories/CVE-2026-15103.md)
  `CVE-2026-15103` · CVE record: getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation
- [Digits: WordPress Mobile Number Signup and Login <= 9.1.0.5 - Authenticated (Subscriber+) Privilege Escalation via 'digits_reg_userrole' Parameter](https://agentprime.io/advisories/CVE-2026-13741.md)
  `CVE-2026-13741` · CVE record: UnitedOver Digits: WordPress Mobile Number Signup and Login · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation
- [Local privilege escalation via unauthenticated ALPC in ESET Inspect Connector](https://agentprime.io/advisories/CVE-2026-6423.md)
  `CVE-2026-6423` · CVE record: ESET, spol. s.r.o. ESET Inspect Connector · CVSS 8.5 High · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation
- [Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2026-12525.md)
  `CVE-2026-12525` · CVE record: Unknown Redux Framework · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation
- [An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031.](https://agentprime.io/advisories/CVE-2026-36425.md)
  `CVE-2026-36425` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Privilege escalation
- [Wekan: Missing authorization on OIDC Meteor methods allows privilege escalation to admin](https://agentprime.io/advisories/CVE-2026-53444.md)
  `CVE-2026-53444` · CVE record: wekan wekan · CVSS 7.6 High · Not analysed yet · Published 15 Jul 2026 · Tags: Privilege escalation, Broken access control

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTA3LTE1VDIxOjExOjM4LjcxMTAwMFoiLCJDVkUtMjAyNi01MzQ0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTA3LTIxVDIxOjM2OjAwLjA4MjAwMFoiLCJDVkUtMjAyNi02MDU4MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTA3LTIxVDIxOjM2OjAwLjA4MjAwMFoiLCJDVkUtMjAyNi02MDU4MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.