Privilege escalation.

Improper privilege management in Nextcloud Server

• Nextcloud Server
• Privilege escalation

Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

• TeamViewer Remote - Patch Management
• Privilege escalation

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

• TeamViewer Full Client
• TeamViewer Host
• Privilege escalation

Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

• TeamViewer Remote Management - Monitoring
• Privilege escalation

LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

• Privilege escalation
• CWE-345

>=1.91.0, <1.100.4 || >=1.101.0, <1.101.3 || >=1.102.0, <1.102.2 || >=1.103.0, <1.103.1 || >=1.104.0rc1, <1.104.0rc2 · fixed in 1.100.4, 1.101.3, 1.102.2, 1.103.1, 1.104.0rc2

Privilege escalation in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Toolkit component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Improper privilege management in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Privilege escalation

Improper privilege management in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Privilege escalation

Improper privilege management in Octopus Deploy Octopus Server

• Octopus Deploy Octopus Server
• Privilege escalation

Supermicro BMC IPMI feature contains a Privilege escalation vulnerability

• SMCI MBD-X12SPI
• Privilege escalation

Device-code claim permits restricted token escalation in Psono Server

• esaqa GmbH Psono
• Privilege escalation

OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC Mutation

• openpanel
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

BKWLD Decoy Authorization Policy Policy.php privileges management

• BKWLD Decoy
• Privilege escalation

Bdtask Garage 24 Garage Management Software Backend improper authorization

• Bdtask Garage 24 Garage Management Software
• Privilege escalation
• Broken access control

DeepSeek Harness Browser Auth browser-auth.ts improper authorization

• DeepSeek Harness
• Privilege escalation
• Broken access control

Improper Privilege Assignment in boneIO

• boneIO black_debian_images
• Privilege escalation

JIZHICMS Front-end Order OrderController.php pay improper authorization

• JIZHICMS
• Privilege escalation
• Broken access control

icret EasyImage del.php privileges management

• icret EasyImage
• Privilege escalation

openbq-org OpenBB Local API Server api_settings.py access control

• openbq-org OpenBB
• Privilege escalation
• Broken access control

HeyCyan App FileProvider access control

• HeyCyan App
• Privilege escalation
• Broken access control

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.

• Privilege escalation

Parse Server 9.0.0 before 9.10.5-alpha.5 Privilege Escalation via SMS MFA Login

• parse-community parse-server
• Privilege escalation

Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade

• Duplicator
• Privilege escalation

Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers

• Datawiza Proxy Auth Plugin
• Privilege escalation

aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute

• kodezen aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder
• Privilege escalation

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute

• cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
• Privilege escalation

bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop

• Hallo Welt! GmbH BlueSpice
• Privilege escalation
• CWE-1188

Remote Code Execution in CGM CLININET

• CGM CLININET
• Privilege escalation

Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action

• Advanced Custom Fields: Extended
• Advanced Custom Fields: Extended PRO
• Privilege escalation

Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change

• User Profile Builder
• Privilege escalation

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Privilege escalation

Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Changes

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Privilege escalation

Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Privilege escalation

WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

• Cozmoslabs Profile Builder
• Privilege escalation

CM HIPAA Forms < 3.3.2 - hipaa_forms+ Privilege Escalation via cm_hipaa_update_user_role

• HIPAA Forms
• Privilege escalation

Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite

• getgrav grav-plugin-login
• Privilege escalation

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161

• Drupal Webform
• Privilege escalation

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

• Drupal Webform
• Privilege escalation

Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166

• Drupal Webform
• Privilege escalation

Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185

• Drupal Editoria11y Accessibility Checker
• Privilege escalation

HarnessRouter Identity Mode app.py improper authorization

• HarnessRouter
• Privilege escalation
• Broken access control

Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide

• Red Hat Multicluster Global Hub
• Privilege escalation

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

• Cisco Cyber Vision
• Cisco Open Source Snort3
• Privilege escalation

dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization

• dhikshitha29 Insurance-Management-System
• Privilege escalation
• Broken access control

dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

• dhikshitha29 Insurance-Management-System
• Privilege escalation
• Broken access control

WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect

• WP User Manager
• Privilege escalation

Simple Banner < 3.3.3 - Authenticated Privilege Escalation via User Permissions Setting

• Simple Banner
• Privilege escalation

Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint

• triggerdotdev trigger.dev
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Data Integrator

• Oracle Corporation Oracle Data Integrator
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Essbase

• Oracle Corporation Oracle Essbase
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Communications Billing and Revenue Management

• Oracle Corporation Oracle Communications Billing and Revenue Management
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle OLAP

• Oracle Corporation Oracle OLAP
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Business Intelligence Enterprise Edition

• Oracle Corporation Oracle Business Intelligence Enterprise Edition
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle GoldenGate

• Oracle Corporation Oracle GoldenGate
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Business Intelligence Enterprise Edition

• Oracle Corporation Oracle Business Intelligence Enterprise Edition
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Solaris

• Oracle Corporation Oracle Solaris
• Privilege escalation