# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase](https://agentprime.io/advisories/CVE-2026-86406.md)
  `CVE-2026-86406` · CVE record: Unknown User Registration & Membership · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2026 · Tags: Privilege escalation
- [User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2026-80071.md)
  `CVE-2026-80071` · CVE record: Unknown User Registration & Membership · CVSS 7.2 High · Not analysed yet · Published 13 Sept 2026 · Tags: Privilege escalation
- [Tonec Internet Download Manager Kernel Driver idmwfp.sys access control](https://agentprime.io/advisories/CVE-2026-90493.md)
  `CVE-2026-90493` · CVE record: Tonec Internet Download Manager · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Sept 2026 · Tags: Privilege escalation, Broken access control
- [Xuxueli xxl-job JobGroupController.java privileges management](https://agentprime.io/advisories/CVE-2026-90487.md)
  `CVE-2026-90487` · CVE record: Xuxueli xxl-job · CVSS 5.3 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Privilege escalation
- [MemberPress Corporate Accounts <= 1.5.39 - Authenticated (Subscriber+) Privilege Escalation via Mass Assignment in Sub-Account Creation](https://agentprime.io/advisories/CVE-2026-15451.md)
  `CVE-2026-15451` · CVE record: MemberPress MemberPress Corporate Accounts · CVSS 8.8 High · Not analysed yet · Published 12 Sept 2026 · Tags: Privilege escalation
- [Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation](https://agentprime.io/advisories/CVE-2026-87759.md)
  `CVE-2026-87759` · CVE record: Unknown Add User Autocomplete · CVSS 8.8 High · Not analysed yet · Published 12 Sept 2026 · Tags: Privilege escalation
- [WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update](https://agentprime.io/advisories/CVE-2026-85681.md)
  `CVE-2026-85681` · CVE record: Unknown WP Component · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2026 · Tags: Privilege escalation
- [Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation](https://agentprime.io/advisories/CVE-2026-77752.md)
  `CVE-2026-77752` · CVE record: Unknown Temporary Login Without Password · CVSS 7.2 High · Not analysed yet · Published 12 Sept 2026 · Tags: Privilege escalation
- [WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-62106.md)
  `CVE-2026-62106` · CVE record: Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: Privilege escalation
- [WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-62102.md)
  `CVE-2026-62102` · CVE record: Gato GraphQL Gato GraphQL · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: Privilege escalation
- [Command Injection in Puppet Enterprise](https://agentprime.io/advisories/CVE-2026-85979.md)
  `CVE-2026-85979` · CVE record: Perforce Software Puppet Enterprise · CVSS 8.6 High · Not analysed yet · Published 11 Sept 2026 · Tags: Command injection, Privilege escalation, CWE-20
- [Privilege Escalation in TUBITAK BILGEM's Pardus-software](https://agentprime.io/advisories/CVE-2026-8303.md)
  `CVE-2026-8303` · CVE record: TUBITAK BILGEM Software Technologies Research Institute Pardus-software · CVSS 7.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: Privilege escalation
- [Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS](https://agentprime.io/advisories/CVE-2026-89259.md)
  `CVE-2026-89259` · CVE record: gohugoio hugo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Privilege escalation
- [MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator](https://agentprime.io/advisories/CVE-2026-74925.md)
  `CVE-2026-74925` · CVE record: Unknown MultiVendorX · CVSS 7.2 High · Not analysed yet · Published 11 Sept 2026 · Tags: Privilege escalation
- [Multiple vulnerabilities in IBM Aspera Enterprise Webapps](https://agentprime.io/advisories/CVE-2026-75777.md)
  `CVE-2026-75777` · CVE record: IBM Aspera Enterprise WebApps · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions](https://agentprime.io/advisories/CVE-2026-87958.md)
  `CVE-2026-87958` · CVE record: IBM Db2 · CVSS 8.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-9327.md)
  `CVE-2026-9327` · CVE record: IBM WebSphere Application Server · CVSS 6.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion](https://agentprime.io/advisories/GHSA-2724-6cpj-gf3v.md)
  `GHSA-2724-6cpj-gf3v`, `CVE-2026-87998`, `PYSEC-2026-4115` · PyPI `open-webui`: affected `>=0.10.0, <0.11.1`, fixed in `0.11.1` · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation, Broken access control
- [WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-81805.md)
  `CVE-2026-81805` · CVE record: SiteSkite SiteSkite · CVSS 8.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations](https://agentprime.io/advisories/CVE-2026-88891.md)
  `CVE-2026-88891` · CVE record: Openpanel-dev openpanel · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org](https://agentprime.io/advisories/CVE-2026-88863.md)
  `CVE-2026-88863` · CVE record: Cap-go capgo.app · CVSS 8.6 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [Crun: crun: rootful krun with passt executes container payload as host root](https://agentprime.io/advisories/CVE-2026-84042.md)
  `CVE-2026-84042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id](https://agentprime.io/advisories/CVE-2026-81431.md)
  `CVE-2026-81431` · CVE record: Unknown Registration Form for WooCommerce · CVSS 7.2 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation
- [Privilege Escalation in ClearPass OnGuard Agent](https://agentprime.io/advisories/CVE-2026-73788.md)
  `CVE-2026-73788` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79942.md)
  `CVE-2026-79942` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 3.4 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay](https://agentprime.io/advisories/CVE-2026-86746.md)
  `CVE-2026-86746` · CVE record: grokability snipe-it · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP).](https://agentprime.io/advisories/CVE-2026-15140.md)
  `CVE-2026-15140` · CVE record: Everpure Portworx Operator · CVSS 7.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Local privilege escalation vulnerability in ESET AV Remover](https://agentprime.io/advisories/CVE-2026-12858.md)
  `CVE-2026-12858` · CVE record: ESET spol. s.r.o. ESET AV Remover (standalone) · CVSS 8.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user](https://agentprime.io/advisories/CVE-2026-14359.md)
  `CVE-2026-14359` · CVE record: Yith YITH WooCommerce Waitlist Premium · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant](https://agentprime.io/advisories/CVE-2026-75927.md)
  `CVE-2026-75927` · CVE record: publishpress User Role Editor – PublishPress Capabilities: Access Control and User Roles · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action](https://agentprime.io/advisories/CVE-2026-17553.md)
  `CVE-2026-17553` · CVE record: levelfourstorefront Shopping Cart & eCommerce Store · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation](https://agentprime.io/advisories/CVE-2026-76801.md)
  `CVE-2026-76801` · CVE record: fireplugins FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-87506.md)
  `CVE-2026-87506` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions](https://agentprime.io/advisories/CVE-2026-84869.md)
  `CVE-2026-84869` · CVE record: ConnectWise ScreenConnect · CVSS 9.9 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Google Android XR](https://agentprime.io/advisories/CVE-2026-28659.md)
  `CVE-2026-28659` · CVE record: Google Android XR · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android Wear](https://agentprime.io/advisories/CVE-2026-49883.md)
  `CVE-2026-49883` · CVE record: Google Android Wear · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization](https://agentprime.io/advisories/CVE-2026-86804.md)
  `CVE-2026-86804` · CVE record: seakee CPA-Manager-Plus · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-58874.md)
  `CVE-2026-58874` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-58846.md)
  `CVE-2026-58846` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Microsoft Office SharePoint Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69464.md)
  `CVE-2026-69464` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Microsoft Office SharePoint Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69409.md)
  `CVE-2026-69409` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Microsoft SQL Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-66818.md)
  `CVE-2026-66818` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68830.md)
  `CVE-2026-68830` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal, Privilege escalation
- [Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount](https://agentprime.io/advisories/CVE-2026-77968.md)
  `CVE-2026-77968` · CVE record: Red Hat Red Hat build of Apache Camel - HawtIO 4 · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer](https://agentprime.io/advisories/CVE-2026-77654.md)
  `CVE-2026-77654` · CVE record: Algosec Horizon Security Analyzer · CVSS 6.1 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [TYPO3-CORE-SA-2026-023: Missing Authorization in lowlevel commands](https://agentprime.io/advisories/PKSA-t4m5-b2kz-hh4n.md)
  `PKSA-t4m5-b2kz-hh4n`, `CVE-2026-85400` · Packagist `typo3/cms-lowlevel`: affected `>=14.2.0, <14.3.7`, fixed in `14.3.7` · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation, Broken access control
- [WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-81792.md)
  `CVE-2026-81792` · CVE record: MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management](https://agentprime.io/advisories/CVE-2026-86516.md)
  `CVE-2026-86516` · CVE record: elenavanengelenmaslova mocknest-serverless · CVSS 5.1 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation
- [java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control](https://agentprime.io/advisories/CVE-2026-86512.md)
  `CVE-2026-86512` · CVE record: java-json-tools json-patch · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Privilege escalation, Broken access control
- [Improper privilege management in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80166.md)
  `CVE-2026-80166` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.8 High · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [JetBrains YouTrack: In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with…](https://agentprime.io/advisories/CVE-2026-86500.md)
  `CVE-2026-86500` · CVE record: JetBrains YouTrack · CVSS 5.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [JetBrains YouTrack: In JetBrains YouTrack before 2026.2.18634…](https://agentprime.io/advisories/CVE-2026-86482.md)
  `CVE-2026-86482` · CVE record: JetBrains YouTrack · CVSS 8.8 High · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter](https://agentprime.io/advisories/CVE-2026-14444.md)
  `CVE-2026-14444` · CVE record: Very Good Plugins WP Fusion (Pro) · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80238.md)
  `CVE-2026-80238` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [Improper privilege management in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80178.md)
  `CVE-2026-80178` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [Privilege Escalation](https://agentprime.io/advisories/CVE-2026-77697.md)
  `CVE-2026-77697` · CVE record: Zohocorp ManageEngine Endpoint Central · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [Privilege Escalation](https://agentprime.io/advisories/CVE-2026-85640.md)
  `CVE-2026-85640` · CVE record: Zohocorp ManageEngine Endpoint Central · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [Privilege Escalation](https://agentprime.io/advisories/CVE-2026-77699.md)
  `CVE-2026-77699` · CVE record: Zohocorp ManageEngine Endpoint Central · CVSS 5.0 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [Privilege Escalation](https://agentprime.io/advisories/CVE-2026-77698.md)
  `CVE-2026-77698` · CVE record: Zohocorp ManageEngine Endpoint Central · CVSS 5.7 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation
- [BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control](https://agentprime.io/advisories/CVE-2026-86285.md)
  `CVE-2026-86285` · CVE record: BookStack · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Privilege escalation, Broken access control

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTA5LTA3VDA4OjE1OjE4LjU4ODAwMFoiLCJDVkUtMjAyNi04NjI4NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTA5LTEzVDA2OjAwOjA4LjY5MDAwMFoiLCJDVkUtMjAyNi04ODc2NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTA5LTEzVDA2OjAwOjA4LjY5MDAwMFoiLCJDVkUtMjAyNi04ODc2NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.