CWE-266: Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- roncoo roncoo-payroncoo roncoo-pay lookupList improper authorization6.9 Medium
- ruoyiyangzongzhuan RuoYi selectAll improper authorization5.3 Medium
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorization5.3 Medium
- iocoder yudao-cloudYunaiV yudao-cloud HTTP Request transfer improper authorization5.3 Medium
- jeecg bootJeecgBoot exportXls improper authorization5.3 Medium
- jeecg bootJeecgBoot exportXls improper authorization5.3 Medium
- jeecg bootJeecgBoot exportXls improper authorization5.3 Medium
- jeecg bootJeecgBoot Filter exportXls improper authorization5.3 Medium
- jeecg bootJeecgBoot deleteBatch improper authorization2.3 Low
- jeecg bootJeecgBoot getDepartUserList improper authorization2.3 Low
- topaz servcore tellerTopaz SERVCore Teller Installer SERVCoreTeller_2.0.40D.msi permission8.5 High
- fuyang lipengjun platformfuyang_lipengjun platform queryAll SysSmsLogController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll TopicCategoryController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll TopicController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll UserCouponController improper authorization5.3 Medium
- netapp storagegridCVE-2025-26517 Privilege Escalation Vulnerability in StorageGRID (formerly StorageGRID Webscale)5.4 Medium
- jeecg bootJeecgBoot sendMsg improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll BrandController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll AttributeController improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll AttributeCategoryController improper authorization5.3 Medium
- wondershare repairitWondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability9.4 Critical
- portabilis i-educarPortabilis i-Educar enrollment-history access control5.3 Medium
- newbee-ltd newbee-mallnewbee-mall Order Status paySuccess improper authorization5.3 Medium
- crmebCRMEB UserAddressServices.php editAddress improper authorization5.3 Medium
- crmebCRMEB Administrator Password SystemAdminServices.php save improper authorization5.3 Medium
- ruoyiyangzongzhuan RuoYi Role cancelAll improper authorization5.3 Medium
- shenzhen sixun business management systemShenzhen Sixun Business Management System OperatorStop improper authorization6.9 Medium
- jeecg bootJeecgBoot Tenant Log Export exportLog improper authorization5.3 Medium
- jeecg bootJeecgBoot WebSocket Message sendWebSocketMsg improper authorization5.3 Medium
- linlinjava litemalllinlinjava litemall cancel WxAftersaleController improper authorization5.3 Medium
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorization5.3 Medium
- iocoder yudao-cloudYunaiV yudao-cloud submit improper authorization5.3 Medium
- iocoder ruoyi-vue-proYunaiV ruoyi-vue-pro transfer improper authorization5.3 Medium
- iocoder yudao-cloudYunaiV yudao-cloud transfer improper authorization5.3 Medium
- ketr jepaasJEPaaS Filter doFilterInternal access control5.3 Medium
- papermerge dmsPapermerge DMS Authorization Token improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform AdPositionController queryAll improper authorization5.3 Medium
- eladminelunez eladmin SysLogController 1 queryErrorLogDetail improper authorization5.3 Medium
- portabilis i-educarPortabilis i-Educar turma improper authorization5.3 Medium
- portabilis i-educarPortabilis i-Educar enturmar access control5.3 Medium
- portabilis i-educarPortabilis i-Educar cancelar-enturmacao-em-lote access control5.3 Medium
- portabilis i-educarPortabilis i-Educar enturmacao-em-lote access control5.3 Medium
- eladminelunez eladmin Email Address updateEmail updateUserEmail improper authorization2.3 Low
- axiomthemes smart seoWordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability9.8 Critical
- portabilis i-educarPortabilis i-Educar exportacao-para-o-seb access control5.3 Medium
- john luetke media authorWordPress Media Author Plugin <= 1.0.4 - Broken Access Control Vulnerability5.5 Medium
- google androidIn android_app of Android.bp, there is a possible way to launch any activity as a system user....4.0 Medium
- google androidIn apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches...4.0 Medium
- elunez eladminelunez eladmin LocalStorageController deleteFile improper authorization5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform queryAll AdController improper authorization5.3 Medium
- Show moreLoading…