# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management](https://agentprime.io/advisories/CVE-2026-82670.md)
  `CVE-2026-82670` · CVE record: IObit Uninstaller · CVSS 4.8 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation
- [hulumi before v1.3.2 Privilege Escalation via IAM Policy](https://agentprime.io/advisories/CVE-2026-82857.md)
  `CVE-2026-82857` · CVE record: kerberosmansour hulumi · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation
- [Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management](https://agentprime.io/advisories/CVE-2026-82628.md)
  `CVE-2026-82628` · CVE record: Colorful iGameCenter · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation
- [LogNet grpc-spring-boot-starter Annotation Processing improper authorization](https://agentprime.io/advisories/CVE-2026-82594.md)
  `CVE-2026-82594` · CVE record: LogNet grpc-spring-boot-starter · CVSS 2.3 Low · Not analysed yet · Published 30 Aug 2026 · Tags: Privilege escalation, Broken access control
- [sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization](https://agentprime.io/advisories/CVE-2026-82553.md)
  `CVE-2026-82553` · CVE record: sambitraj Student Management System · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Privilege escalation, Broken access control
- [SiteServer SSCMS Agent Installation Workflow access control](https://agentprime.io/advisories/CVE-2026-82486.md)
  `CVE-2026-82486` · CVE record: SiteServer SSCMS · CVSS 2.3 Low · Not analysed yet · Published 30 Aug 2026 · Tags: Privilege escalation, Broken access control
- [Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin](https://agentprime.io/advisories/CVE-2026-81766.md)
  `CVE-2026-81766` · CVE record: Unknown Really Simple Security · CVSS 6.6 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Privilege escalation
- [Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout](https://agentprime.io/advisories/CVE-2026-15369.md)
  `CVE-2026-15369` · CVE record: Addify Custom User Registration Fields for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Privilege escalation
- [Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation](https://agentprime.io/advisories/CVE-2026-16259.md)
  `CVE-2026-16259` · CVE record: Unknown Uix UserCenter · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Privilege escalation
- [Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2026-10522.md)
  `CVE-2026-10522` · CVE record: Unknown MemberHero · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Privilege escalation
- [Snipe-IT has an Improper Privilege Management issue](https://agentprime.io/advisories/GHSA-j5g3-42wp-gqm3.md)
  `GHSA-j5g3-42wp-gqm3`, `CVE-2026-55843`, `PKSA-dysn-9smy-t3nb` · Packagist `snipe/snipe-it`: affected `<8.6.0`, fixed in `8.6.0` · CVSS 7.0 High · Not analysed yet · Published 28 Aug 2026 · Tags: Privilege escalation
- [piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.](https://agentprime.io/advisories/GHSA-2gh4-jmwq-rr8w.md)
  `GHSA-2gh4-jmwq-rr8w`, `CVE-2026-55485`, `PYSEC-2026-3882` · PyPI `piccolo-admin`: affected `<1.14.0`, fixed in `1.14.0` · CVSS 8.8 High · Not analysed yet · Published 28 Aug 2026 · Tags: Information disclosure, Privilege escalation, Broken access control
- [User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings](https://agentprime.io/advisories/CVE-2026-79996.md)
  `CVE-2026-79996` · CVE record: Unknown User Registration & Membership · CVSS 7.2 High · Not analysed yet · Published 28 Aug 2026 · Tags: Privilege escalation
- [Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms](https://agentprime.io/advisories/CVE-2026-19423.md)
  `CVE-2026-19423` · CVE record: Unknown Ultimate Member · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2026 · Tags: Privilege escalation
- [WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs](https://agentprime.io/advisories/CVE-2026-78174.md)
  `CVE-2026-78174` · CVE record: WatchGuard Dimension · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Information disclosure, Privilege escalation
- [Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges](https://agentprime.io/advisories/CVE-2026-81818.md)
  `CVE-2026-81818` · CVE record: flowintel flowintel · CVSS 8.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-78271.md)
  `CVE-2026-78271` · CVE record: WP Manage Ninja FluentCRM Pro · CVSS 7.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-32566.md)
  `CVE-2026-32566` · CVE record: ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings](https://agentprime.io/advisories/CVE-2026-13415.md)
  `CVE-2026-13415` · CVE record: Unknown CMP · CVSS 7.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the s…](https://agentprime.io/advisories/CVE-2026-37071.md)
  `CVE-2026-37071` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parameter to the /api/v1/…](https://agentprime.io/advisories/CVE-2026-36102.md)
  `CVE-2026-36102` · CVE record · CVSS 7.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Privilege escalation
- [Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie](https://agentprime.io/advisories/CVE-2026-75977.md)
  `CVE-2026-75977` · CVE record: kitae-park Mang Board WP · CVSS 8.8 High · Not analysed yet · Published 26 Aug 2026 · Tags: Privilege escalation
- [Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation](https://agentprime.io/advisories/CVE-2026-19220.md)
  `CVE-2026-19220` · CVE record: Unknown Forminator Forms · CVSS 3.7 Low · Not analysed yet · Published 26 Aug 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-79090.md)
  `CVE-2026-79090` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-79276.md)
  `CVE-2026-79276` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-79226.md)
  `CVE-2026-79226` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-78999.md)
  `CVE-2026-78999` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [Improper privilege management in Apple iOS and iPadOS](https://agentprime.io/advisories/CVE-2026-43657.md)
  `CVE-2026-43657` · CVE record: Apple iOS and iPadOS · CVSS 3.3 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold](https://agentprime.io/advisories/GHSA-pg62-f8g4-4wqh.md)
  `GHSA-pg62-f8g4-4wqh`, `CVE-2026-57995`, `PKSA-hycs-5t33-gw1y`, `PKSA-p7rj-kmfh-92s9` · Packagist `phpmyfaq/phpmyfaq` and 1 more: affected `<4.1.5`, fixed in `4.1.5` · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '\<wp_option>' Nodes](https://agentprime.io/advisories/CVE-2026-75971.md)
  `CVE-2026-75971` · CVE record: roxnor ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets · CVSS 7.2 High · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [Improper privilege management in Octopus Deploy Codefresh](https://agentprime.io/advisories/CVE-2026-12878.md)
  `CVE-2026-12878` · CVE record: Octopus Deploy Codefresh · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Privilege escalation
- [WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-78267.md)
  `CVE-2026-78267` · CVE record: Cozmoslabs TranslatePress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-32561.md)
  `CVE-2026-32561` · CVE record: LiquidThemes Booking Hub · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [HCL Hive is affected by a broken access control vulnerability](https://agentprime.io/advisories/CVE-2026-21756.md)
  `CVE-2026-21756` · CVE record: HCLSoftware HCL Hive · CVSS 7.2 High · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-66648.md)
  `CVE-2026-66648` · CVE record: MVPThemes Jawn · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-32558.md)
  `CVE-2026-32558` · CVE record: RedefiningTheWeb Affiliate Pro - Affiliate Program for WooCommerce & WordPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-28165.md)
  `CVE-2026-28165` · CVE record: UnitedOver, LLC Digits · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [Open5GS AMF UEContextReleaseRequest Path improper authorization](https://agentprime.io/advisories/CVE-2026-78158.md)
  `CVE-2026-78158` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation, Broken access control
- [A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5.](https://agentprime.io/advisories/CVE-2026-30512.md)
  `CVE-2026-30512` · CVE record · CVSS 7.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: Privilege escalation
- [SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization](https://agentprime.io/advisories/CVE-2026-78115.md)
  `CVE-2026-78115` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.3 Medium · Not analysed yet · Published 23 Aug 2026 · Tags: Privilege escalation, Broken access control
- [Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask](https://agentprime.io/advisories/CVE-2026-77003.md)
  `CVE-2026-77003` · CVE record: Unknown Content Mask · CVSS 2.7 Low · Not analysed yet · Published 23 Aug 2026 · Tags: Privilege escalation
- [RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2026-13598.md)
  `CVE-2026-13598` · CVE record: Unknown RestrictMate · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Aug 2026 · Tags: Privilege escalation
- [Security Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite](https://agentprime.io/advisories/CVE-2026-16149.md)
  `CVE-2026-16149` · CVE record: marc4 Security Hardener · CVSS 8.8 High · Not analysed yet · Published 22 Aug 2026 · Tags: Privilege escalation
- [Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass](https://agentprime.io/advisories/CVE-2026-19222.md)
  `CVE-2026-19222` · CVE record: Unknown Forminator Forms · CVSS 6.6 Medium · Not analysed yet · Published 22 Aug 2026 · Tags: Privilege escalation
- [WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action](https://agentprime.io/advisories/CVE-2026-19883.md)
  `CVE-2026-19883` · CVE record: etruel WPeMatico RSS Feed Fetcher · CVSS 8.8 High · Not analysed yet · Published 22 Aug 2026 · Tags: Privilege escalation
- [LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update](https://agentprime.io/advisories/CVE-2026-53527.md)
  `CVE-2026-53527` · CVE record: perber leafwiki · CVSS 8.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: Privilege escalation
- [Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization](https://agentprime.io/advisories/CVE-2026-77795.md)
  `CVE-2026-77795` · CVE record: Dromara RuoYi-Vue-Plus · CVSS 5.3 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Privilege escalation, Broken access control
- [Dolibarr Account card.php improper authorization](https://agentprime.io/advisories/CVE-2026-77686.md)
  `CVE-2026-77686` · CVE record: Dolibarr · CVSS 5.3 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Privilege escalation, Broken access control
- [Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow](https://agentprime.io/advisories/CVE-2026-59799.md)
  `CVE-2026-59799` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 8.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: Privilege escalation
- [AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools](https://agentprime.io/advisories/CVE-2026-75796.md)
  `CVE-2026-75796` · CVE record: Unknown AI Engine · CVSS 7.2 High · Not analysed yet · Published 21 Aug 2026 · Tags: Privilege escalation
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-19449.md)
  `CVE-2026-19449` · CVE record: IBM AIX and 1 more · CVSS 8.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17145.md)
  `CVE-2026-17145` · CVE record: IBM AIX and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16997.md)
  `CVE-2026-16997` · CVE record: IBM AIX and 1 more · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16991.md)
  `CVE-2026-16991` · CVE record: IBM AIX and 1 more · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16937.md)
  `CVE-2026-16937` · CVE record: IBM AIX and 1 more · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-76018.md)
  `CVE-2026-76018` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template](https://agentprime.io/advisories/CVE-2026-75910.md)
  `CVE-2026-75910` · CVE record: AWS Athena Federated Query Clickhouse Connector deployment template · CVSS 7.1 High · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation
- [Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution](https://agentprime.io/advisories/GHSA-6f2p-296r-cc28.md)
  `GHSA-6f2p-296r-cc28`, `CVE-2026-54168`, `GO-2026-6263` · Go `github.com/openshift-pipelines/pipelines-as-code`: affected `<0.37.8 || >=0.38.0, <0.39.6 || >=0.40.0, <0.42.1 || >=0.43.0, <0.48.0`, fixed in `0.37.8`, `0.39.6`, `0.42.1`, `0.48.0` · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation, Broken access control
- [elunez eladmin GenConfigController improper authorization](https://agentprime.io/advisories/CVE-2026-77036.md)
  `CVE-2026-77036` · CVE record: elunez eladmin · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation, Broken access control
- [SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization](https://agentprime.io/advisories/CVE-2026-76999.md)
  `CVE-2026-76999` · CVE record: SourceCodester CET Automated Grading System with AI Predictive Analytics · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Privilege escalation, Broken access control

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTA4LTIwVDE1OjQ1OjA4LjE5MDAwMFoiLCJDVkUtMjAyNi03Njk5OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTA4LTMxVDA5OjQ1OjA4LjIzMDAwMFoiLCJDVkUtMjAyNi04MjY3MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTA4LTMxVDA5OjQ1OjA4LjIzMDAwMFoiLCJDVkUtMjAyNi04MjY3MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.