Privilege escalation.

SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management

• SourceCodester Syllabus-Aligned Learning Management & Examination System
• Privilege escalation

JeecgBoot AiragModelController.java exportXls access control

• JeecgBoot
• Privilege escalation
• Broken access control

PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

• DALIBO PostgreSQL Anonymizer
• Privilege escalation

Open5GS AMF/MME improper authorization

• Open5GS
• Privilege escalation
• Broken access control

SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover

• SureCart
• Privilege escalation

Tenda CP3 Redirect.cpp SetRedirectEnable privileges management

• Tenda CP3
• Privilege escalation

grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag

• getgrav grav-plugin-api
• Privilege escalation

Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

• Tyche Softwares Abandoned Cart Pro for WooCommerce
• Privilege escalation

SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication

• SEO Flow by LupsOnline
• Privilege escalation

OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation

• Privilege escalation
• Authentication bypass

<1.0.3 || >=1.1.0, <1.1.3 || >=1.2.0-rc.1, <1.2.0 · fixed in 1.0.3, 1.1.3, 1.2.0

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

• Privilege escalation

>=0.8.41, <0.8.64 · fixed in 0.8.64

IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

• i
• Privilege escalation

StackStorm st2 API Key auth.py privileges management

• StackStorm st2
• Privilege escalation

StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

• StackStorm st2
• Privilege escalation

Dolibarr Legacy File Manager config.inc.php access control

• Dolibarr
• Privilege escalation
• Broken access control

Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password.

• Privilege escalation
• Broken access control

An issue in X-Serie Gateway Firmware V6_00_05 allows a remote attacker to escalate privileges via the endpoints /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi.

• Privilege escalation

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component

• Privilege escalation
• CWE-640

SpecterOps BloodHound Graph Write Endpoint v2.go NewV2API improper authorization

• SpecterOps BloodHound
• Privilege escalation
• Broken access control

Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

• Privilege escalation

<0.0.0-20260705182501-bb2a4e1f08c8 · fixed in 0.0.0-20260705182501-bb2a4e1f08c8

WordPress Bricksforge plugin <= 3.1.8.8 - Privilege Escalation vulnerability

• Bricksforge
• Privilege escalation

WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability

• WC Lovers WCFM Membership
• Privilege escalation

WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash

• WWBN AVideo
• Privilege escalation

OS command injection in privileged configuration handling

• SEPPmail AG Secure Email Gateway
• Command injection
• Privilege escalation

Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107

• Drupal Content Moderation Notifications
• Privilege escalation

WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability

• LiquidThemes Booking Hub
• Privilege escalation

WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability

• Paul Ryan Authorizer
• Privilege escalation

Kimai before 2.65.0 Authentication Bypass via Team Creation

• kimai
• Privilege escalation

Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance

• cms
• Privilege escalation

Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation

• Theme My Login
• Privilege escalation

Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

• Advanced Custom Fields: Extended
• Privilege escalation

JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection

• JetBackup
• Privilege escalation

Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'

• melograno Booking for Appointments and Events Calendar – Amelia
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX

• Hewlett Packard Enterprise (HPE) AOS-CX
• Privilege escalation

Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX

• Hewlett Packard Enterprise (HPE) AOS-CX
• Privilege escalation

Privilege Escalation via Unauthorized Access to Sensitive Session Information

• Hewlett Packard Enterprise (HPE) AOS-CX
• Privilege escalation

Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Local Privilege Escalation in HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Privilege escalation

Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure

• Elastic Kibana
• Privilege escalation

Cleo Harmony JWT Refresh Token connections privileges management

• Cleo Harmony
• Privilege escalation

Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter

• scriptsbundle Nokri – Job Board WordPress Theme
• Privilege escalation

WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability

• WP Manage Ninja Fluent Forms Pro Add On Pack
• Privilege escalation

caoqianming django-vue-admin file access control

• caoqianming django-vue-admin
• Privilege escalation
• Broken access control

Doccano Open Source Annotation Tools for Machine Learning Practitioners Bulk-Delete Endpoint category-types LabelList access control

• Doccano Open Source Annotation Tools for Machine Learning Practitioners
• Doccano Auto Labeling Pipeline Module to Annotate a Document Automatically
• Privilege escalation
• Broken access control

Doccano Open Source Annotation Tools for Machine Learning Practitioners Project Example Detail Endpoint examples ExampleDetail access control

• Doccano Open Source Annotation Tools for Machine Learning Practitioners
• Doccano Auto Labeling Pipeline Module to Annotate a Document Automatically
• Privilege escalation
• Broken access control

dibo-software diboot Tenant Resource Assignment resource access control

• dibo-software diboot
• Privilege escalation
• Broken access control

dibo-software diboot Tenant Administrator Management API admin access control

• dibo-software diboot
• Privilege escalation
• Broken access control

MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configuration

• samanhappy mcphub
• Privilege escalation
• Broken access control

MegaEase EaseProbe Middleware server.go realIP access control

• MegaEase EaseProbe
• Privilege escalation
• Broken access control

ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management

• ieungSoft Ultra RAMDisk Pro
• Privilege escalation

IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys ZwTerminateProcess privileges management

• IObit Unlocker
• Privilege escalation