CWE-266
CVEs classified under CWE-266, newest first.
381 CVEsRSS
CVE-2026-39765High· 7.2Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
CVE-2026-39775High· 8.8Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
CVE-2026-39774High· 8.8Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.
Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.
CVE-2026-39773Critical· 10.0Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
CVE-2026-95594High· 8.1Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt
Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0.
CVE-2026-104405High· 8.1Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
CVE-2026-104757High· 7.2Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
CVE-2026-105070High· 8.8Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
CVE-2026-105058High· 8.8Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
CVE-2026-48197High· 7.2Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
CVE-2026-105621Medium· 5.4PoCA security flaw has been discovered in jishenghua jshERP up to 3.5
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt …
CVE-2026-105611Low· 2.7PoCA vulnerability was determined in chillzhuang SpringBlade up to 5.0.1
A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Deta…
CVE-2026-105610Medium· 4.7PoCA vulnerability was found in chillzhuang SpringBlade up to 5.0.1
A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Pa…
CVE-2026-105571High· 7.3PoCA flaw has been found in PickMall Lilishop up to 4.2.4
A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper…
CVE-2026-105382High· 7.3PoCA flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d
A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount of the file php/controller.php of the component Account Administration. This ma…
CVE-2026-105284Critical· 10.0PoCA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455
A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorizat…
CVE-2026-103752Critical· 9.8PoCUnauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.
Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.
CVE-2026-103068High· 8.8Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions.
Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions.
CVE-2026-103286High· 7.3Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles
Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff acces…
CVE-2026-103494Medium· 6.6In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes
CVE-2026-103534Medium· 6.3PoCA vulnerability was determined in David-Crty databasement up to 1.7.1
A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper a…
CVE-2026-103532Medium· 5.3PoCA vulnerability has been found in immich-app Immich up to 2.7.5
A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Passwo…
CVE-2026-102129High· 7.2A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned
A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise…
CVE-2026-47591High· 7.8NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A…
CVE-2026-103470Critical· 9.3In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.
CVE-2026-47518Medium· 6.0NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify prote…
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify prote…
CVE-2026-94178High· 7.5Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.
Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.
CVE-2026-96350Critical· 9.8Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
CVE-2026-96815High· 7.2Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
CVE-2026-96821Medium· 6.3Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.
Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.