# Privilege escalation.

Gaining rights a user or process shouldn’t have. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper privilege management in Oracle Corporation Oracle Database Server](https://agentprime.io/advisories/CVE-2026-91499.md)
  `CVE-2026-91499` · CVE record: Oracle Corporation Oracle Database Server · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle HTTP Server](https://agentprime.io/advisories/CVE-2026-91473.md)
  `CVE-2026-91473` · CVE record: Oracle Corporation Oracle HTTP Server · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91446.md)
  `CVE-2026-91446` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91444.md)
  `CVE-2026-91444` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91439.md)
  `CVE-2026-91439` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91434.md)
  `CVE-2026-91434` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-91426.md)
  `CVE-2026-91426` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle HTTP Server](https://agentprime.io/advisories/CVE-2026-91419.md)
  `CVE-2026-91419` · CVE record: Oracle Corporation Oracle HTTP Server · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Outside In Technology](https://agentprime.io/advisories/CVE-2026-91355.md)
  `CVE-2026-91355` · CVE record: Oracle Corporation Oracle Outside In Technology · CVSS 8.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-91348.md)
  `CVE-2026-91348` · CVE record: Oracle Corporation Oracle Solaris · CVSS 8.4 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-91335.md)
  `CVE-2026-91335` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 2.6 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-91311.md)
  `CVE-2026-91311` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-91306.md)
  `CVE-2026-91306` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne Tools](https://agentprime.io/advisories/CVE-2026-91278.md)
  `CVE-2026-91278` · CVE record: Oracle Corporation JD Edwards EnterpriseOne Tools · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation iProcurement](https://agentprime.io/advisories/CVE-2026-91260.md)
  `CVE-2026-91260` · CVE record: Oracle Corporation iProcurement · CVSS 7.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-91253.md)
  `CVE-2026-91253` · CVE record: Oracle Corporation Oracle Solaris · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle SOA Suite](https://agentprime.io/advisories/CVE-2026-91250.md)
  `CVE-2026-91250` · CVE record: Oracle Corporation Oracle SOA Suite · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Solaris](https://agentprime.io/advisories/CVE-2026-87423.md)
  `CVE-2026-87423` · CVE record: Oracle Corporation Oracle Solaris · CVSS 4.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-87299.md)
  `CVE-2026-87299` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 6.1 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle WebCenter Content](https://agentprime.io/advisories/CVE-2026-87298.md)
  `CVE-2026-87298` · CVE record: Oracle Corporation Oracle WebCenter Content · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Oracle Communications Billing and Revenue Management](https://agentprime.io/advisories/CVE-2026-87297.md)
  `CVE-2026-87297` · CVE record: Oracle Corporation Oracle Communications Billing and Revenue Management · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Missing authentication in Oracle Corporation Oracle Product Lifecycle Analytics](https://agentprime.io/advisories/CVE-2026-101469.md)
  `CVE-2026-101469` · CVE record: Oracle Corporation Oracle Product Lifecycle Analytics · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: SQL injection, Privilege escalation, Authentication bypass
- [Improper privilege management in Oracle Corporation Oracle EDI Gateway](https://agentprime.io/advisories/CVE-2026-101466.md)
  `CVE-2026-101466` · CVE record: Oracle Corporation Oracle EDI Gateway · CVSS 7.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Oracle Corporation Siebel CRM Deployment](https://agentprime.io/advisories/CVE-2026-101453.md)
  `CVE-2026-101453` · CVE record: Oracle Corporation Siebel CRM Deployment · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-113256.md)
  `CVE-2026-113256` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-113342.md)
  `CVE-2026-113342` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-113221.md)
  `CVE-2026-113221` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-113283.md)
  `CVE-2026-113283` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications](https://agentprime.io/advisories/CVE-2026-112407.md)
  `CVE-2026-112407` · CVE record: AWS CICD-toolchain-for-serverless-applications · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [aaPanel common.py GetClientIp access control](https://agentprime.io/advisories/CVE-2026-113507.md)
  `CVE-2026-113507` · CVE record: aaPanel · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation, Broken access control
- [A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)](https://agentprime.io/advisories/CVE-2026-34484.md)
  `CVE-2026-34484` · CVE record: Nokia Nokia 1830 Global Express (GX) · CVSS 6.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation](https://agentprime.io/advisories/CVE-2026-105312.md)
  `CVE-2026-105312` · CVE record: Red Hat StreamsHub Console for Apache Kafka® and 2 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [This issue was addressed by removing additional entitlements.](https://agentprime.io/advisories/CVE-2026-86935.md)
  `CVE-2026-86935` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Apple macOS](https://agentprime.io/advisories/CVE-2026-86933.md)
  `CVE-2026-86933` · CVE record: Apple macOS · CVSS 3.3 Low · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86921.md)
  `CVE-2026-86921` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 6.2 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Apple macOS](https://agentprime.io/advisories/CVE-2026-28853.md)
  `CVE-2026-28853` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Privilege escalation
- [IBM Sterling Connect:Direct for Unix Improper Privilege Management](https://agentprime.io/advisories/CVE-2026-105453.md)
  `CVE-2026-105453` · CVE record: IBM Sterling Connect Direct for Unix · CVSS 8.4 High · Not analysed yet · Published 19 Oct 2026 · Tags: Privilege escalation
- [WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-110898.md)
  `CVE-2026-110898` · CVE record: WPDeveloper Essential Addons for Elementor · CVSS 6.4 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Privilege escalation
- [donetick History Deletion model.go CanDeleteHistory improper authorization](https://agentprime.io/advisories/CVE-2026-112045.md)
  `CVE-2026-112045` · CVE record: donetick · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Privilege escalation, Broken access control
- [light0011 cms Captcha Validation UserController.class.php access control](https://agentprime.io/advisories/CVE-2026-112025.md)
  `CVE-2026-112025` · CVE record: light0011 cms · CVSS 6.9 Medium · Not analysed yet · Published 18 Oct 2026 · Tags: Privilege escalation, Broken access control
- [WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-110373.md)
  `CVE-2026-110373` · CVE record: Hamid Alinia Login with phone number · CVSS 8.1 High · Not analysed yet · Published 18 Oct 2026 · Tags: Privilege escalation
- [WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2026-110372.md)
  `CVE-2026-110372` · CVE record: Brainstorm Force OttoKit · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2026 · Tags: Privilege escalation
- [Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key](https://agentprime.io/advisories/CVE-2026-110031.md)
  `CVE-2026-110031` · CVE record: Unknown Salon Booking System · CVSS 7.2 High · Not analysed yet · Published 18 Oct 2026 · Tags: Privilege escalation
- [phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API](https://agentprime.io/advisories/CVE-2026-111909.md)
  `CVE-2026-111909` · CVE record: thorsten phpMyFAQ · CVSS 7.2 High · Not analysed yet · Published 17 Oct 2026 · Tags: Privilege escalation
- [phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API](https://agentprime.io/advisories/CVE-2026-111893.md)
  `CVE-2026-111893` · CVE record: thorsten phpMyFAQ · CVSS 8.5 High · Not analysed yet · Published 17 Oct 2026 · Tags: Privilege escalation
- [phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API](https://agentprime.io/advisories/CVE-2026-111891.md)
  `CVE-2026-111891` · CVE record: thorsten phpMyFAQ · CVSS 7.0 High · Not analysed yet · Published 17 Oct 2026 · Tags: Privilege escalation
- [phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights](https://agentprime.io/advisories/CVE-2026-111890.md)
  `CVE-2026-111890` · CVE record: thorsten phpMyFAQ · CVSS 7.0 High · Not analysed yet · Published 17 Oct 2026 · Tags: Privilege escalation
- [Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)](https://agentprime.io/advisories/GHSA-pw5q-rjx4-7f7p.md)
  `GHSA-pw5q-rjx4-7f7p`, `CVE-2026-96627`, `GO-2026-6807` · Go `github.com/getarcaneapp/arcane/backend/v2`: affected `<2.6.0`, fixed in `2.6.0` · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH](https://agentprime.io/advisories/CVE-2026-17491.md)
  `CVE-2026-17491` · CVE record: IBM i · CVSS 5.4 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [IBM i is Affected By An Improper Privilege Management Vulnerability](https://agentprime.io/advisories/CVE-2026-102917.md)
  `CVE-2026-102917` · CVE record: IBM i · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup](https://agentprime.io/advisories/CVE-2026-111708.md)
  `CVE-2026-111708` · CVE record: canove whaticket-community · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [Mailu domain managers can take over higher-privileged accounts](https://agentprime.io/advisories/CVE-2026-86008.md)
  `CVE-2026-86008` · CVE record: Mailu Mailu · CVSS 7.2 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation, Broken access control
- [WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint](https://agentprime.io/advisories/CVE-2026-104755.md)
  `CVE-2026-104755` · CVE record: aresit WP Compress – Instant Performance & Speed Optimization · CVSS 4.8 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter](https://agentprime.io/advisories/CVE-2026-85659.md)
  `CVE-2026-85659` · CVE record: ontraport PilotPress · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on \[wppb-register\]](https://agentprime.io/advisories/CVE-2026-109447.md)
  `CVE-2026-109447` · CVE record: cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor · CVSS 8.1 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter](https://agentprime.io/advisories/CVE-2026-89079.md)
  `CVE-2026-89079` · CVE record: jfarthing84 Theme My Login · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute](https://agentprime.io/advisories/CVE-2026-104798.md)
  `CVE-2026-104798` · CVE record: joedolson My Calendar – Accessible Event Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter](https://agentprime.io/advisories/CVE-2026-111114.md)
  `CVE-2026-111114` · CVE record: posimyththemes Nexter Extension – Security, Performance, Code Snippets & Site Toolkit · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter](https://agentprime.io/advisories/CVE-2026-109515.md)
  `CVE-2026-109515` · CVE record: properfraction MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation
- [InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting](https://agentprime.io/advisories/CVE-2026-109400.md)
  `CVE-2026-109400` · CVE record: instawp InstaWP Connect – 1-click WP Staging & Migration · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: Privilege escalation

Newest: <https://agentprime.io/advisories/tag/privilege-escalation.md>
Older: <https://agentprime.io/advisories/tag/privilege-escalation.md?cursor=WyIyMDI2LTEwLTE2VDA0OjI3OjAxLjExNTAwMFoiLCJDVkUtMjAyNi0xMDk0MDAiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=privilege-escalation&cursor=WyIyMDI2LTEwLTIwVDIxOjI2OjI2LjcxMjAwMFoiLCJDVkUtMjAyNi05MTUzNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/privilege-escalation/?cursor=WyIyMDI2LTEwLTIwVDIxOjI2OjI2LjcxMjAwMFoiLCJDVkUtMjAyNi05MTUzNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.