# Privilege escalation. Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management](https://agentprime.io/advisories/CVE-2026-86275.md) `CVE-2026-86275` · CVE record: SourceCodester Syllabus-Aligned Learning Management & Examination System · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation - [JeecgBoot AiragModelController.java exportXls access control](https://agentprime.io/advisories/CVE-2026-86228.md) `CVE-2026-86228` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation, Broken access control - [PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()](https://agentprime.io/advisories/CVE-2026-83534.md) `CVE-2026-83534` · CVE record: DALIBO PostgreSQL Anonymizer · CVSS 6.4 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation - [Open5GS AMF/MME improper authorization](https://agentprime.io/advisories/CVE-2026-86212.md) `CVE-2026-86212` · CVE record: Open5GS · CVSS 5.3 Medium · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation, Broken access control - [SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover](https://agentprime.io/advisories/CVE-2026-18480.md) `CVE-2026-18480` · CVE record: Unknown SureCart · CVSS 8.8 High · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation - [Tenda CP3 Redirect.cpp SetRedirectEnable privileges management](https://agentprime.io/advisories/CVE-2026-86153.md) `CVE-2026-86153` · CVE record: Tenda CP3 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Sept 2026 · Tags: Privilege escalation - [grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag](https://agentprime.io/advisories/CVE-2026-86195.md) `CVE-2026-86195` · CVE record: getgrav grav-plugin-api · CVSS 8.7 High · Not analysed yet · Published 5 Sept 2026 · Tags: Privilege escalation - [Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation](https://agentprime.io/advisories/CVE-2026-81543.md) `CVE-2026-81543` · CVE record: Tyche Softwares Abandoned Cart Pro for WooCommerce · CVSS 8.8 High · Not analysed yet · Published 5 Sept 2026 · Tags: Privilege escalation - [SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication](https://agentprime.io/advisories/CVE-2026-78362.md) `CVE-2026-78362` · CVE record: Unknown SEO Flow by LupsOnline · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Privilege escalation - [OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation](https://agentprime.io/advisories/GHSA-rh53-xvx2-j327.md) `GHSA-rh53-xvx2-j327`, `CVE-2026-73842`, `GO-2026-6428` · Go `github.com/openchoreo/openchoreo`: affected `<1.0.3 || >=1.1.0, <1.1.3 || >=1.2.0-rc.1, <1.2.0`, fixed in `1.0.3`, `1.1.3`, `1.2.0` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation, Authentication bypass, Broken access control - [CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)](https://agentprime.io/advisories/GHSA-g29h-pfmp-qp9r.md) `GHSA-g29h-pfmp-qp9r`, `CVE-2026-75857` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 7.3 High · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation - [IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH \[\]](https://agentprime.io/advisories/CVE-2026-18858.md) `CVE-2026-18858` · CVE record: IBM i · CVSS 3.3 Low · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation - [StackStorm st2 API Key auth.py privileges management](https://agentprime.io/advisories/CVE-2026-85514.md) `CVE-2026-85514` · CVE record: StackStorm st2 · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation - [StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management](https://agentprime.io/advisories/CVE-2026-85513.md) `CVE-2026-85513` · CVE record: StackStorm st2 · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation - [Dolibarr Legacy File Manager config.inc.php access control](https://agentprime.io/advisories/CVE-2026-85401.md) `CVE-2026-85401` · CVE record: Dolibarr · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation, Broken access control - [Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password.](https://agentprime.io/advisories/CVE-2026-75166.md) `CVE-2026-75166` · CVE record · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation, Broken access control - [An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi.](https://agentprime.io/advisories/CVE-2026-75160.md) `CVE-2026-75160` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation - [An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component](https://agentprime.io/advisories/CVE-2026-71625.md) `CVE-2026-71625` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Privilege escalation, CWE-640 - [SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization](https://agentprime.io/advisories/CVE-2026-85241.md) `CVE-2026-85241` · CVE record: SpecterOps BloodHound · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Privilege escalation, Broken access control - [Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision](https://agentprime.io/advisories/GHSA-cxvf-gvfq-36w2.md) `GHSA-cxvf-gvfq-36w2`, `CVE-2026-73293`, `GO-2026-6371` · Go `github.com/semaphoreui/semaphore`: affected `<0.0.0-20260705182501-bb2a4e1f08c8`, fixed in `0.0.0-20260705182501-bb2a4e1f08c8` · CVSS 8.8 High · Not analysed yet · Published 3 Sept 2026 · Tags: Privilege escalation - [WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-84814.md) `CVE-2026-84814` · CVE record: Bricksforge. Bricksforge · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Privilege escalation - [WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-84756.md) `CVE-2026-84756` · CVE record: WC Lovers WCFM Membership · CVSS 7.1 High · Not analysed yet · Published 3 Sept 2026 · Tags: Privilege escalation - [WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash](https://agentprime.io/advisories/CVE-2026-85154.md) `CVE-2026-85154` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Privilege escalation - [OS command injection in privileged configuration handling](https://agentprime.io/advisories/CVE-2026-84830.md) `CVE-2026-84830` · CVE record: SEPPmail AG Secure Email Gateway · CVSS 8.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection, Privilege escalation - [Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107](https://agentprime.io/advisories/CVE-2026-81161.md) `CVE-2026-81161` · CVE record: Drupal Content Moderation Notifications · CVSS 3.3 Low · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-81769.md) `CVE-2026-81769` · CVE record: LiquidThemes Booking Hub · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-81294.md) `CVE-2026-81294` · CVE record: Paul Ryan Authorizer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [Kimai before 2.65.0 Authentication Bypass via Team Creation](https://agentprime.io/advisories/CVE-2026-84807.md) `CVE-2026-84807` · CVE record: kimai kimai · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance](https://agentprime.io/advisories/CVE-2026-84795.md) `CVE-2026-84795` · CVE record: craftcms cms · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation](https://agentprime.io/advisories/CVE-2026-81583.md) `CVE-2026-81583` · CVE record: Unknown Theme My Login · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action](https://agentprime.io/advisories/CVE-2026-80467.md) `CVE-2026-80467` · CVE record: Unknown Advanced Custom Fields: Extended · CVSS 8.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection](https://agentprime.io/advisories/CVE-2026-19453.md) `CVE-2026-19453` · CVE record: Unknown JetBackup · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'](https://agentprime.io/advisories/CVE-2026-9055.md) `CVE-2026-9055` · CVE record: melograno Booking for Appointments and Events Calendar – Amelia · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-84358.md) `CVE-2026-84358` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX](https://agentprime.io/advisories/CVE-2026-73779.md) `CVE-2026-73779` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX](https://agentprime.io/advisories/CVE-2026-73758.md) `CVE-2026-73758` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Privilege Escalation via Unauthorized Access to Sensitive Session Information](https://agentprime.io/advisories/CVE-2026-73755.md) `CVE-2026-73755` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 5.7 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73747.md) `CVE-2026-73747` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 2.5 Low · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Local Privilege Escalation in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73740.md) `CVE-2026-73740` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 4.4 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API](https://agentprime.io/advisories/CVE-2026-73730.md) `CVE-2026-73730` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73729.md) `CVE-2026-73729` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73725.md) `CVE-2026-73725` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.0 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73724.md) `CVE-2026-73724` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-73723.md) `CVE-2026-73723` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API](https://agentprime.io/advisories/CVE-2026-73714.md) `CVE-2026-73714` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.6 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73713.md) `CVE-2026-73713` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API](https://agentprime.io/advisories/CVE-2026-73711.md) `CVE-2026-73711` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-72654.md) `CVE-2026-72654` · CVE record: Elastic Kibana · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Cleo Harmony JWT Refresh Token connections privileges management](https://agentprime.io/advisories/CVE-2026-84115.md) `CVE-2026-84115` · CVE record: Cleo Harmony · CVSS 6.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter](https://agentprime.io/advisories/CVE-2026-18550.md) `CVE-2026-18550` · CVE record: scriptsbundle Nokri – Job Board WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Privilege escalation - [WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-81297.md) `CVE-2026-81297` · CVE record: WP Manage Ninja Fluent Forms Pro Add On Pack · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation - [caoqianming django-vue-admin file access control](https://agentprime.io/advisories/CVE-2026-82835.md) `CVE-2026-82835` · CVE record: caoqianming django-vue-admin · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control](https://agentprime.io/advisories/CVE-2026-82834.md) `CVE-2026-82834` · CVE record: Doccano Open Source Annotation Tools for Machine Learning Practitioners and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control](https://agentprime.io/advisories/CVE-2026-82833.md) `CVE-2026-82833` · CVE record: Doccano Open Source Annotation Tools for Machine Learning Practitioners and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [dibo-software diboot Tenant Resource Assignment resource access control](https://agentprime.io/advisories/CVE-2026-82818.md) `CVE-2026-82818` · CVE record: dibo-software diboot · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [dibo-software diboot Tenant Administrator Management API admin access control](https://agentprime.io/advisories/CVE-2026-82817.md) `CVE-2026-82817` · CVE record: dibo-software diboot · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [MCPHub: Missing Authorization on \`PUT /api/system-config\` Lets Any Non-Admin Rewrite Global Security Configuration](https://agentprime.io/advisories/CVE-2026-79744.md) `CVE-2026-79744` · CVE record: samanhappy mcphub · CVSS 8.8 High · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [MegaEase EaseProbe Middleware server.go realIP access control](https://agentprime.io/advisories/CVE-2026-82815.md) `CVE-2026-82815` · CVE record: MegaEase EaseProbe · CVSS 6.9 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation, Broken access control - [ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management](https://agentprime.io/advisories/CVE-2026-82807.md) `CVE-2026-82807` · CVE record: ieungSoft Ultra RAMDisk Pro · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation - [IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys ZwTerminateProcess privileges management](https://agentprime.io/advisories/CVE-2026-82671.md) `CVE-2026-82671` · CVE record: IObit Unlocker · CVSS 4.6 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: Privilege escalation Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .