CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- openidentityplatform openam OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass 9.3 Critical
- go-vikunja vikunja Vikunja 0.18.0 before 2.7.1 Privilege Escalation via Account Deletion 7.1 High
- themegrill registration form for woocommerce Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout 9.8 Critical
- rubengc automatorwp – no-code workflow automation, integration & webhooks plugin, now with ai AutomatorWP <= 6.0.4 - Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option 7.5 High
- tomdever wpforo forum wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Privilege Escalation to 'data[secondary_groupids]' CSV Parameter 7.5 High
- denishua wpjam basic WPJAM Basic <= 7.1 - Unauthenticated Privilege Escalation to 'data[args][role]' Parameter 8.1 High
- red hat openshift ai (rhoai) Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration No score
- unknown ileads sms gateway by exsile Exsile SMS Gateway < 2.0.0 - Subscriber+ Privilege Escalation via Arbitrary Option Update 8.8 High
- unknown magic link Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation 8.8 High
- freescout-help-desk freescout FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save 7.1 High
- danbilabs advanced members for acf Advanced Members for ACF <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form 8.8 High
- themekraft buddyforms BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter 9.8 Critical
- pubjet | پابجت Pubjet | پابجت <= 5.4.8 - Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action 7.6 High
- unknown gs jwt authentication for wp rest api GS JWT Authentication <= 1.0.0 - Unauthenticated Privilege Escalation via SQLi 9.8 Critical
- unknown cool media filter Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission 8.8 High
- unknown wcfm membership WCFM Membership < 2.12.1 - Subscriber+ Payment Verification Bypass 6.5 Medium
- surfer Surfer < 1.8.1.759 - Contributor+ Privilege Escalation via Editor API Key Disclosure 6.5 Medium
- unknown whizz WHIZZ <= 1.1.8 - Unauthenticated Arbitrary User Password Reset 9.8 Critical
- unknown placester Real Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email Update 9.8 Critical
- suitecrm SuiteCRM: Privilege escalation via V8 REST modules (ACLRoles, ACLActions, Administration) 8.8 High
- immich-app immich Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints 8.8 High
- saad iqbal all in one login All In One Login 2.4.0 - 2.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force 9.8 Critical
- stellarwp givewp – donation plugin and fundraising platform GiveWP <= 4.19.1 - Authenticated (Custom+) Privilege Escalation to 'donor_default_user_role' Parameter 8.8 High
- kyverno Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy 9.4 Critical
- kyverno Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String 8.3 High
- kyverno Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check 9.3 Critical
- yangzongzhuan ruoyi-vue yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management 5.3 Medium
- mobile builder builder, rnlab mobile builder +1 more Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters 8.8 High
- wso2 identity server, identity application management component +1 more Privilege Escalation via Client Credentials Grant Type in WSO2 Identity Server 7.2 High
- easysoft zentao pms EasySoft ZenTao PMS User model.php checkGroupChange privileges management 5.3 Medium
- google chrome Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38... 8.3 High
- hewlett packard enterprise (hpe) virtual intranet access (via) Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client 8.8 High
- glpi-project glpi GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning 8.6 High
- surrealdb SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision 8.6 High
- eclipse foundation threadx User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege 8.5 High
- avaya system manager CVE-2026-16305 7.8 High
- dell alienware command center (awcc) Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege... 7.8 High
- apache software foundation syncope Apache Syncope: AuthProfile value escalation via self-service update 8.8 High
- prefecthq prefab-ui Prefab UI Pyodide sandbox escape to host RCE 10.0 Critical
- beam-cloud beta9 worker Beta9 build sandbox escape via chroot-only isolation 9.9 Critical
- google android In multiple locations, there is a possible permission bypass due to a missing permission check.... 8.4 High
- google android In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission... 8.4 High
- ken678 yzncms ken678 YznCMS Auth Group Group.php Backend privileges management 5.1 Medium
- wedevs user frontend – membership, user registration, user profile, user directory & content restriction with frontend post submission User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter 8.8 High
- roxnor rox appointment booking – event, calendar & appointment scheduling Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint 8.8 High
- wardee mail logging & catcher Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure 7.5 High
- unknown essential addons for elementor Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role 4.2 Medium
- inex ixp-manager IXP Manager has authenticated non-administrator privilege escalation 8.8 High
- shopperdotcom shopper Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creation 8.7 High
- akuity kargo Kargo: Privilege escalation via Project RBAC management in the Kargo API 9.3 Critical
- Show olderLoading…