# Privilege escalation. Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16923.md) `CVE-2026-16923` · CVE record: IBM AIX and 1 more · CVSS 7.0 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-66682.md) `CVE-2026-66682` · CVE record: Tyche Softwares. Abandoned Cart Pro for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2025-15689.md) `CVE-2025-15689` · CVE record: ThemeGoods Capella · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships](https://agentprime.io/advisories/CVE-2026-11861.md) `CVE-2026-11861` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update](https://agentprime.io/advisories/CVE-2026-75860.md) `CVE-2026-75860` · CVE record: Unknown JSON Options · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation - [Improper Access Control through Scheduled Searches in Splunk AI Toolkit](https://agentprime.io/advisories/CVE-2026-76396.md) `CVE-2026-76396` · CVE record: Splunk Splunk AI Toolkit · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76350.md) `CVE-2026-76350` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Improper Privilege Management on the Management Port in Splunk Enterprise for Windows](https://agentprime.io/advisories/CVE-2026-76259.md) `CVE-2026-76259` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76253.md) `CVE-2026-76253` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [DS8900F and DS8A00 Privilege Escalation](https://agentprime.io/advisories/CVE-2025-36255.md) `CVE-2025-36255` · CVE record: IBM DS8A00( R10.0 - R10.1 ) and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16874.md) `CVE-2026-16874` · CVE record: IBM AIX and 1 more · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16850.md) `CVE-2026-16850` · CVE record: IBM AIX and 1 more · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Wekan: a low-privilege board member escalates to board admin and takes over a private board via the \`sort\` collection-allow rule](https://agentprime.io/advisories/CVE-2026-68561.md) `CVE-2026-68561` · CVE record: wekan wekan · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation, Broken access control - [Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork](https://agentprime.io/advisories/CVE-2026-70496.md) `CVE-2026-70496` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16703.md) `CVE-2026-16703` · CVE record: IBM AIX and 1 more · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Improper privilege management in Dell PowerPath](https://agentprime.io/advisories/CVE-2026-32802.md) `CVE-2026-32802` · CVE record: Dell PowerPath · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Improper privilege management in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-70421.md) `CVE-2026-70421` · CVE record: Dell OpenManage Enterprise · CVSS 7.2 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-73390.md) `CVE-2026-73390` · CVE record: KlbTheme Total Donations · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-73347.md) `CVE-2026-73347` · CVE record: ThemetechMount TrueBooker · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission](https://agentprime.io/advisories/CVE-2026-75978.md) `CVE-2026-75978` · CVE record: xianrendzw EasyReport · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation, CWE-275 - [linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)](https://agentprime.io/advisories/GHSA-rh9c-rqvg-f7pr.md) `GHSA-rh9c-rqvg-f7pr`, `CVE-2026-73974`, `PYSEC-2026-3682` · PyPI `linuxfabrik-lib`: affected `<6.1.0`, fixed in `6.1.0` · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal, Privilege escalation - [Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)](https://agentprime.io/advisories/CVE-2026-73973.md) `CVE-2026-73973` · CVE record: Linuxfabrik monitoring-plugins · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal, Privilege escalation - [Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management](https://agentprime.io/advisories/CVE-2026-70928.md) `CVE-2026-70928` · CVE record: Oracle Corporation Oracle Hyperion Financial Management · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle Virtual Directory](https://agentprime.io/advisories/CVE-2026-61231.md) `CVE-2026-61231` · CVE record: Oracle Corporation Oracle Virtual Directory · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Execution with unnecessary privileges in NVIDIA Cumulus Linux GA](https://agentprime.io/advisories/CVE-2026-24183.md) `CVE-2026-24183` · CVE record: NVIDIA Cumulus Linux GA · CVSS 7.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps](https://agentprime.io/advisories/CVE-2026-66782.md) `CVE-2026-66782` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 and 2 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval](https://agentprime.io/advisories/CVE-2026-75924.md) `CVE-2026-75924` · CVE record: Red Hat Multicluster Engine for Kubernetes and 1 more · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-73350.md) `CVE-2026-73350` · CVE record: PSM Plugins SupportCandy · CVSS 8.2 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-68568.md) `CVE-2026-68568` · CVE record: Stylemix MasterStudy LMS · CVSS 6.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-28191.md) `CVE-2026-28191` · CVE record: ThemeOne The Grid · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Duplicate Advisory: Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin](https://agentprime.io/advisories/GHSA-m97h-2qj3-5773.md) `GHSA-m97h-2qj3-5773` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 9.1 Critical · Withdrawn · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Enterprise Policies component](https://agentprime.io/advisories/CVE-2026-74985.md) `CVE-2026-74985` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Request Handling component](https://agentprime.io/advisories/CVE-2026-74955.md) `CVE-2026-74955` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Application Update component](https://agentprime.io/advisories/CVE-2026-74952.md) `CVE-2026-74952` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Downloads API component](https://agentprime.io/advisories/CVE-2026-74950.md) `CVE-2026-74950` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Shell Integration component](https://agentprime.io/advisories/CVE-2026-74965.md) `CVE-2026-74965` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Networking: Cookies component](https://agentprime.io/advisories/CVE-2026-74953.md) `CVE-2026-74953` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Remote Settings Client component](https://agentprime.io/advisories/CVE-2026-74942.md) `CVE-2026-74942` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-74941.md) `CVE-2026-74941` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-74939.md) `CVE-2026-74939` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Privilege escalation in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-74935.md) `CVE-2026-74935` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [ArcadeDB before 26.8.1 Authentication Bypass via Async Command](https://agentprime.io/advisories/CVE-2026-75851.md) `CVE-2026-75851` · CVE record: ArcadeData arcadedb · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set_server_setting](https://agentprime.io/advisories/CVE-2026-75845.md) `CVE-2026-75845` · CVE record: ArcadeData arcadedb · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction](https://agentprime.io/advisories/CVE-2026-75843.md) `CVE-2026-75843` · CVE record: ArcadeData arcadedb · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization](https://agentprime.io/advisories/CVE-2024-14045.md) `CVE-2024-14045` · CVE record: OpenBoxes · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation, Broken access control - [Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations.](https://agentprime.io/advisories/CVE-2026-67846.md) `CVE-2026-67846` · CVE record · CVSS 7.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Privilege escalation - [Dokploy: Invitation Role Escalation Allows Organization Takeover](https://agentprime.io/advisories/CVE-2026-45790.md) `CVE-2026-45790` · CVE record: Dokploy dokploy · CVSS 8.0 High · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [SkyPilot Authentication Bypass via Service Account Role Escalation](https://agentprime.io/advisories/CVE-2026-75481.md) `CVE-2026-75481` · CVE record: skypilot-org skypilot · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters](https://agentprime.io/advisories/CVE-2026-70495.md) `CVE-2026-70495` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 8.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation](https://agentprime.io/advisories/CVE-2026-15218.md) `CVE-2026-15218` · CVE record: Red Hat Red Hat OpenShift AI 3.4 · CVSS 7.9 High · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management](https://agentprime.io/advisories/CVE-2026-19996.md) `CVE-2026-19996` · CVE record: Webkul Bagisto · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [Adblock for Youtube Extension Event Listener contentscript.js updateDynamicRules improper authorization](https://agentprime.io/advisories/CVE-2026-19986.md) `CVE-2026-19986` · CVE record: Adblock for Youtube Extension · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation, Broken access control - [An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.](https://agentprime.io/advisories/CVE-2026-50774.md) `CVE-2026-50774` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.](https://agentprime.io/advisories/CVE-2026-50770.md) `CVE-2026-50770` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Privilege escalation - [All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import](https://agentprime.io/advisories/CVE-2026-17533.md) `CVE-2026-17533` · CVE record: Unknown All-in-One WP Migration and Backup · CVSS 7.2 High · Not analysed yet · Published 16 Aug 2026 · Tags: Privilege escalation - [Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter](https://agentprime.io/advisories/CVE-2026-18432.md) `CVE-2026-18432` · CVE record: shabti Frontend Admin by DynamiApps · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2026 · Tags: Privilege escalation - [OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management](https://agentprime.io/advisories/CVE-2026-19928.md) `CVE-2026-19928` · CVE record: OpenBoxes · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Privilege escalation - [SpaceX Starlink Router Gen 3 gRPC Management get_status access control](https://agentprime.io/advisories/CVE-2026-19918.md) `CVE-2026-19918` · CVE record: SpaceX Starlink Router Gen 3 · CVSS 5.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Privilege escalation, Broken access control - [D-Link DIR-842 vsftpd vsftpd.conf default permission](https://agentprime.io/advisories/CVE-2026-19893.md) `CVE-2026-19893` · CVE record: D-Link DIR-842 · CVSS 2.3 Low · Not analysed yet · Published 15 Aug 2026 · Tags: Privilege escalation, Broken access control - [Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision](https://agentprime.io/advisories/CVE-2026-15142.md) `CVE-2026-15142` · CVE record: WebCodingPlace Real Estate Manager Pro · CVSS 7.5 High · Not analysed yet · Published 15 Aug 2026 · Tags: Privilege escalation Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .