# Privilege escalation. Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2026-17472.md) `CVE-2026-17472` · CVE record: IBM Concert · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation - [Authenticated Remote File System Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)](https://agentprime.io/advisories/CVE-2026-76713.md) `CVE-2026-76713` · CVE record: Hewlett Packard Enterprise (HPE) ALE · CVSS 7.2 High · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation - [Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution](https://agentprime.io/advisories/CVE-2026-83597.md) `CVE-2026-83597` · CVE record: netdata netdata · CVSS 7.0 High · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation - [Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair](https://agentprime.io/advisories/CVE-2026-83598.md) `CVE-2026-83598` · CVE record: netdata netdata · CVSS 7.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation, CWE-427 - [HP Support Assistant - Local Escalation of Privilege](https://agentprime.io/advisories/CVE-2026-19915.md) `CVE-2026-19915` · CVE record: HP Inc HP Support Assistant · CVSS 7.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation - [CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action](https://agentprime.io/advisories/CVE-2026-12470.md) `CVE-2026-12470` · CVE record: niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes · CVSS 7.2 High · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation - [Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter](https://agentprime.io/advisories/CVE-2026-13355.md) `CVE-2026-13355` · CVE record: Meta Box Meta Box Frontend Submission · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation - [Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management](https://agentprime.io/advisories/CVE-2026-94425.md) `CVE-2026-94425` · CVE record: Moore Threads MTT S80 Driver Package · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Privilege escalation - [MaxKB: Prompt-injectable agent can lead to command execution](https://agentprime.io/advisories/CVE-2026-77521.md) `CVE-2026-77521` · CVE record: 1Panel-dev MaxKB · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection, Privilege escalation, CWE-749 - [HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching](https://agentprime.io/advisories/CVE-2026-48826.md) `CVE-2026-48826` · CVE record: sysadminsmedia homebox · CVSS 8.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Privilege escalation, Broken access control - [UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent](https://agentprime.io/advisories/CVE-2025-71421.md) `CVE-2025-71421` · CVE record: uvdesk core-framework and 1 more · CVSS 8.6 High · Not analysed yet · Published 21 Sept 2026 · Tags: Privilege escalation - [MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime](https://agentprime.io/advisories/CVE-2026-94381.md) `CVE-2026-94381` · CVE record: MISP MISP · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Privilege escalation - [Cri-o: cri-o checkpoint restore bypasses destination security context](https://agentprime.io/advisories/CVE-2026-92574.md) `CVE-2026-92574` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Privilege escalation - [CodeAstro QR Code Attendance Management System UserController.php save privileges management](https://agentprime.io/advisories/CVE-2026-94048.md) `CVE-2026-94048` · CVE record: CodeAstro QR Code Attendance Management System · CVSS 5.1 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management](https://agentprime.io/advisories/CVE-2026-94047.md) `CVE-2026-94047` · CVE record: samanhappy MCPHub · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [D-Link DIR-X1860/DIR-X1860Z routerd ubus access control](https://agentprime.io/advisories/CVE-2026-94036.md) `CVE-2026-94036` · CVE record: D-Link DIR-X1860 and 1 more · CVSS 8.7 High · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation, Broken access control - [Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP](https://agentprime.io/advisories/CVE-2026-86554.md) `CVE-2026-86554` · CVE record: ZTE SmartLife · CVSS 4.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management](https://agentprime.io/advisories/CVE-2026-93968.md) `CVE-2026-93968` · CVE record: aiyiyi121 SxDevOps · CVSS 5.1 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer](https://agentprime.io/advisories/CVE-2026-92541.md) `CVE-2026-92541` · CVE record: Unknown Import and export users and customers · CVSS 7.2 High · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_users](https://agentprime.io/advisories/CVE-2026-92540.md) `CVE-2026-92540` · CVE record: Unknown Import and export users and customers · CVSS 7.2 High · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import](https://agentprime.io/advisories/CVE-2026-87068.md) `CVE-2026-87068` · CVE record: Unknown Forminator Forms · CVSS 6.6 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching](https://agentprime.io/advisories/CVE-2026-82842.md) `CVE-2026-82842` · CVE record: Unknown SAML Single Sign On · CVSS 8.1 High · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [Dromara UJCMS UserController UserController.java usernameExist improper authorization](https://agentprime.io/advisories/CVE-2026-93961.md) `CVE-2026-93961` · CVE record: Dromara UJCMS · CVSS 6.9 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation, Broken access control - [A password reset vulnerability in ZTE SmartLife APP](https://agentprime.io/advisories/CVE-2026-86553.md) `CVE-2026-86553` · CVE record: ZTE SmartLife · CVSS 8.8 High · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP](https://agentprime.io/advisories/CVE-2026-86552.md) `CVE-2026-86552` · CVE record: ZTE SmartLife · CVSS 5.4 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Privilege escalation - [UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email](https://agentprime.io/advisories/CVE-2026-86814.md) `CVE-2026-86814` · CVE record: Unknown UsersWP · CVSS 8.1 High · Not analysed yet · Published 19 Sept 2026 · Tags: Privilege escalation - [WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import](https://agentprime.io/advisories/CVE-2026-76554.md) `CVE-2026-76554` · CVE record: Unknown WP Import Export Lite · CVSS 7.2 High · Not analysed yet · Published 19 Sept 2026 · Tags: Privilege escalation - [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84089.md) `CVE-2026-84089` · CVE record: IBM Guardium Data Protection · CVSS 7.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation - [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84083.md) `CVE-2026-84083` · CVE record: IBM Guardium Data Protection · CVSS 7.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation - [pg_partman has privilege escalation through SQL injection in create_partition_time()](https://agentprime.io/advisories/CVE-2026-61781.md) `CVE-2026-61781` · CVE record: pgpartman pg_partman · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: SQL injection, Privilege escalation - [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82893.md) `CVE-2026-82893` · CVE record: IBM Guardium Data Protection · CVSS 7.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation - [AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups](https://agentprime.io/advisories/GHSA-3w57-8xmc-8v26.md) `GHSA-3w57-8xmc-8v26`, `CVE-2026-63349`, `PYSEC-2026-4023` · PyPI `anyio`: affected `>=4.14.0, <4.14.2`, fixed in `4.14.2` · CVSS 7.0 High · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation - [SveltyCMS User Attribute Update Endpoint +server.ts access control](https://agentprime.io/advisories/CVE-2026-93504.md) `CVE-2026-93504` · CVE record: SveltyCMS · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation, Broken access control - [Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter](https://agentprime.io/advisories/CVE-2026-92619.md) `CVE-2026-92619` · CVE record: wpdevelop Booking Calendar · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation - [All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure](https://agentprime.io/advisories/CVE-2026-81810.md) `CVE-2026-81810` · CVE record: Unknown All-in-One WP Migration and Backup · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Privilege escalation - [Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin](https://agentprime.io/advisories/GHSA-xhfv-7758-r9hx.md) `GHSA-xhfv-7758-r9hx`, `CVE-2026-75837`, `PKSA-dzhx-7r7k-p6cx` · Packagist `getgrav/grav`: affected `<2.0.14`, fixed in `2.0.14` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation, Broken access control - [Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors](https://agentprime.io/advisories/CVE-2026-54501.md) `CVE-2026-54501` · CVE record: webrecorder browsertrix · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, Privilege escalation, CWE-20 - [Duplicate Advisory: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes](https://agentprime.io/advisories/GHSA-7c3p-84r8-h79q.md) `GHSA-7c3p-84r8-h79q` · npm `vm2`: affected `<=3.11.6`, no fixed version yet · CVSS 8.5 High · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation - [Duplicate Advisory: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process](https://agentprime.io/advisories/GHSA-28q4-xrqh-9479.md) `GHSA-28q4-xrqh-9479` · npm `vm2`: affected `<=3.11.6`, no fixed version yet · CVSS 9.9 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81445.md) `CVE-2026-81445` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 7.2 High · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81442.md) `CVE-2026-81442` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation - [PuppyFW <= 0.4.4 - Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege Escalation](https://agentprime.io/advisories/CVE-2026-88904.md) `CVE-2026-88904` · CVE record: Unknown PuppyFW · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation - [Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request](https://agentprime.io/advisories/CVE-2026-85128.md) `CVE-2026-85128` · CVE record: Unknown Choose User Role at Registration · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Privilege escalation - [Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20287.md) `CVE-2026-20287` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Dell ECS](https://agentprime.io/advisories/CVE-2026-26947.md) `CVE-2026-26947` · CVE record: Dell ECS · CVSS 6.7 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [Privilege escalation via legacy access group creation endpoint](https://agentprime.io/advisories/CVE-2026-88817.md) `CVE-2026-88817` · CVE record: Curiosity GmbH Curiosity Workspace · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation, Broken access control - [Security Advisory 0163](https://agentprime.io/advisories/CVE-2026-73461.md) `CVE-2026-73461` · CVE record: Arista Networks EOS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification](https://agentprime.io/advisories/CVE-2026-85569.md) `CVE-2026-85569` · CVE record: Unknown Tutor LMS · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch](https://agentprime.io/advisories/CVE-2026-85530.md) `CVE-2026-85530` · CVE record: Unknown GiveWP · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '\_jet_engine_booking_form_id' Parameter](https://agentprime.io/advisories/CVE-2026-12793.md) `CVE-2026-12793` · CVE record: jetmonsters JetFormBuilder — Dynamic Blocks Form Builder · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87273.md) `CVE-2026-87273` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 8.6 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87272.md) `CVE-2026-87272` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87271.md) `CVE-2026-87271` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87270.md) `CVE-2026-87270` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87269.md) `CVE-2026-87269` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle VM VirtualBox](https://agentprime.io/advisories/CVE-2026-87268.md) `CVE-2026-87268` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management](https://agentprime.io/advisories/CVE-2026-87248.md) `CVE-2026-87248` · CVE record: Oracle Corporation Oracle Hyperion Financial Management · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management](https://agentprime.io/advisories/CVE-2026-87247.md) `CVE-2026-87247` · CVE record: Oracle Corporation Oracle Hyperion Financial Management · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management](https://agentprime.io/advisories/CVE-2026-87246.md) `CVE-2026-87246` · CVE record: Oracle Corporation Oracle Hyperion Financial Management · CVSS 7.2 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation - [Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management](https://agentprime.io/advisories/CVE-2026-87245.md) `CVE-2026-87245` · CVE record: Oracle Corporation Oracle Hyperion Financial Management · CVSS 8.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: Privilege escalation Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .