# Privilege escalation. Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter](https://agentprime.io/advisories/CVE-2026-104745.md) `CVE-2026-104745` · CVE record: wpcodefactory Customer Email Verification for WooCommerce · CVSS 8.1 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation - [containerd CRI plugin: Checkpoint restore bypasses destination security context](https://agentprime.io/advisories/GHSA-p7v4-vr35-mj6f.md) `GHSA-p7v4-vr35-mj6f`, `CVE-2026-95837`, `GO-2026-6791` · Go `github.com/containerd/containerd/v2`: affected `>=2.1.0, <2.2.7 || >=2.3.0, <2.3.4`, fixed in `2.2.7`, `2.3.4` · CVSS 7.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication](https://agentprime.io/advisories/GHSA-637c-6jxx-4rwm.md) `GHSA-637c-6jxx-4rwm`, `CVE-2026-77524`, `GO-2026-6776` · Go `github.com/kedacore/keda` and 1 more: affected `<=1.5.0`, no fixed version yet · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation, Server-side request forgery (SSRF) - [Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods](https://agentprime.io/advisories/GHSA-54mm-6729-r5wp.md) `GHSA-54mm-6729-r5wp`, `CVE-2026-85990`, `PKSA-vxb4-5j8y-5cbx` · Packagist `leantime/leantime`: affected `<3.10.0`, fixed in `3.10.0` · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation, Broken access control - [WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-109892.md) `CVE-2026-109892` · CVE record: Shabti Kaplan Frontend Admin by DynamiApps · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [Improper privilege management in Eclipse Foundation Eclipse Connected Services Platform](https://agentprime.io/advisories/CVE-2026-110724.md) `CVE-2026-110724` · CVE record: Eclipse Foundation Eclipse Connected Services Platform · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation, Broken access control - [WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-109693.md) `CVE-2026-109693` · CVE record: WP ManageNinja LLC Fluent CRM · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'](https://agentprime.io/advisories/CVE-2026-8145.md) `CVE-2026-8145` · CVE record: wpxpo WholesaleX – All-in-One B2B Solution with Wholesale Pricing · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-109694.md) `CVE-2026-109694` · CVE record: WP ManageNinja LLC Fluent CRM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64](https://agentprime.io/advisories/CVE-2026-16438.md) `CVE-2026-16438` · CVE record: Mitsubishi Electric Corporation GENESIS64 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler](https://agentprime.io/advisories/CVE-2026-109145.md) `CVE-2026-109145` · CVE record: Unknown User Rights Access Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Privilege escalation - [util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass](https://agentprime.io/advisories/CVE-2026-53614.md) `CVE-2026-53614` · CVE record: util-linux util-linux · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation, CWE-807 - [Gitea repository ownership escalation by administrators](https://agentprime.io/advisories/CVE-2026-73814.md) `CVE-2026-73814` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Gitea API token scope escalation through HTTP signatures](https://agentprime.io/advisories/CVE-2026-73804.md) `CVE-2026-73804` · CVE record: Gitea Gitea · CVSS 8.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation, Broken access control - [Gitea organization team policy bypass through repository API](https://agentprime.io/advisories/CVE-2026-60010.md) `CVE-2026-60010` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation, Broken access control - [MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Service](https://agentprime.io/advisories/CVE-2026-110633.md) `CVE-2026-110633` · CVE record: Report One MyReport Updater · CVSS 8.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-107424.md) `CVE-2026-107424` · CVE record: M A Vinoth Kumar Frontend Dashboard · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution](https://agentprime.io/advisories/CVE-2026-104795.md) `CVE-2026-104795` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register](https://agentprime.io/advisories/CVE-2026-104748.md) `CVE-2026-104748` · CVE record: wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache](https://agentprime.io/advisories/CVE-2026-104767.md) `CVE-2026-104767` · CVE record: davefx Membership & User Roles for WooCommerce (Automatic Role Changer) · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data](https://agentprime.io/advisories/CVE-2026-104749.md) `CVE-2026-104749` · CVE record: bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation - [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-110150.md) `CVE-2026-110150` · CVE record: Google Chrome · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-102851.md) `CVE-2026-102851` · CVE record: Microsoft Visual Studio Code · CVSS 6.1 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Microsoft Office SharePoint Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96044.md) `CVE-2026-96044` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation, CWE-1287 - [Microsoft Office SharePoint Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88200.md) `CVE-2026-88200` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Windows Host Guardian Service Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-87709.md) `CVE-2026-87709` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Docker Hub account conversion could reassign an active personal access token to another user](https://agentprime.io/advisories/CVE-2026-105445.md) `CVE-2026-105445` · CVE record: Docker Docker Hub · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization](https://agentprime.io/advisories/CVE-2026-109605.md) `CVE-2026-109605` · CVE record: SourceCodester Simple Cafe Billing System · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation, Broken access control - [Huawei openUBMC low-privilege SNMP to administrator privilege escalation](https://agentprime.io/advisories/CVE-2026-65199.md) `CVE-2026-65199` · CVE record: Huawei openBMC · CVSS 5.4 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions](https://agentprime.io/advisories/CVE-2026-109520.md) `CVE-2026-109520` · CVE record: Colorful iGameCenter · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Execution with unnecessary privileges in NVIDIA AIStore framework](https://agentprime.io/advisories/CVE-2026-65162.md) `CVE-2026-65162` · CVE record: NVIDIA AIStore framework · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Privilege escalation in the WebExtensions component](https://agentprime.io/advisories/CVE-2026-109778.md) `CVE-2026-109778` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Privilege escalation in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-109756.md) `CVE-2026-109756` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Privilege escalation in the Panning and Zooming component](https://agentprime.io/advisories/CVE-2026-109743.md) `CVE-2026-109743` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Privilege escalation in the WebExtensions component](https://agentprime.io/advisories/CVE-2026-109739.md) `CVE-2026-109739` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Privilege escalation in the Application Update component](https://agentprime.io/advisories/CVE-2026-109704.md) `CVE-2026-109704` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Siemens SIMATIC WinCC V7.5: A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions)…](https://agentprime.io/advisories/CVE-2026-59241.md) `CVE-2026-59241` · CVE record: Siemens SIMATIC WinCC V7.5 and 2 more · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [calcom cal.com/cal.diy Credentials delete credentials.delete privileges management](https://agentprime.io/advisories/CVE-2026-109143.md) `CVE-2026-109143` · CVE record: calcom cal.com and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [The macOS version of the DigiD app is not signed with Hardened Runtime](https://agentprime.io/advisories/CVE-2026-103316.md) `CVE-2026-103316` · CVE record: Logius DigiD for macOS · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [Incorrect Privilege Assignment in GitLab](https://agentprime.io/advisories/CVE-2026-104661.md) `CVE-2026-104661` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component](https://agentprime.io/advisories/CVE-2026-37107.md) `CVE-2026-37107` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Privilege escalation - [IBM i is Affected By An Improper Privilege Management Vulnerability](https://agentprime.io/advisories/CVE-2026-18343.md) `CVE-2026-18343` · CVE record: IBM i · CVSS 4.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM Aspera Enterprise Webapps Execution with Unnecessary Privileges](https://agentprime.io/advisories/CVE-2026-75621.md) `CVE-2026-75621` · CVE record: IBM Aspera Enterprise WebApps · CVSS 6.2 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation](https://agentprime.io/advisories/CVE-2026-109667.md) `CVE-2026-109667` · CVE record: frappe erpnext · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Frappe before 15.41.0 Privilege Escalation via Document Action](https://agentprime.io/advisories/CVE-2024-58390.md) `CVE-2024-58390` · CVE record: frappe frappe · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management](https://agentprime.io/advisories/CVE-2026-18513.md) `CVE-2026-18513` · CVE record: IBM Maximo Application Suite - Location Service for Esri Component · CVSS 7.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component](https://agentprime.io/advisories/CVE-2026-109567.md) `CVE-2026-109567` · CVE record: zofe rapyd-admin · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [1024-lab smart-admin Support Config Query queryByKey access control](https://agentprime.io/advisories/CVE-2026-108923.md) `CVE-2026-108923` · CVE record: 1024-lab smart-admin · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation, Broken access control - [IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management](https://agentprime.io/advisories/CVE-2026-105464.md) `CVE-2026-105464` · CVE record: IBM Db2 · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance](https://agentprime.io/advisories/CVE-2026-105465.md) `CVE-2026-105465` · CVE record: IBM Db2 · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility](https://agentprime.io/advisories/CVE-2026-78404.md) `CVE-2026-78404` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grants](https://agentprime.io/advisories/CVE-2026-109317.md) `CVE-2026-109317` · CVE record: getgrav grav-plugin-api · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Improper privilege management in Progress MarkLogic Server backup and restore operations](https://agentprime.io/advisories/CVE-2026-85956.md) `CVE-2026-85956` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Improper privilege management in Progress MarkLogic Server xdmp:eval-in](https://agentprime.io/advisories/CVE-2026-85955.md) `CVE-2026-85955` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Improper privilege management in Progress MarkLogic Server higher-order XQuery functions](https://agentprime.io/advisories/CVE-2026-85954.md) `CVE-2026-85954` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio](https://agentprime.io/advisories/CVE-2026-85953.md) `CVE-2026-85953` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal, Privilege escalation - [Improper privilege management in Progress MarkLogic Server REST extensions](https://agentprime.io/advisories/CVE-2026-85950.md) `CVE-2026-85950` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Improper privilege management in Progress MarkLogic Server Management API](https://agentprime.io/advisories/CVE-2026-85948.md) `CVE-2026-85948` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [Improper privilege management in Progress MarkLogic Server forest operations](https://agentprime.io/advisories/CVE-2026-85947.md) `CVE-2026-85947` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [tobychui zoraxy Path Exception Matcher authProviders.go handleBasicAuth improper authorization](https://agentprime.io/advisories/CVE-2026-108899.md) `CVE-2026-108899` · CVE record: tobychui zoraxy · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation, Broken access control Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .