cve.bz

CWE-266: Incorrect Privilege Assignment, page 2

Filter

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-266 at MITRE

Ask an AI about CWE-266

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-266: Incorrect Privilege Assignment and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/266.html and https://cve.bz/cve/cwe/266?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.8CVE-2026-108835EPSS 0.1%

    A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the argument Pid can lead to improper privilege management. The a…

  2. 2.1CVE-2026-108825EPSS 0.2%

    A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is p…

  3. 5.5CVE-2026-108812EPSS 0.3%

    A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be perf…

  4. 5.3CVE-2026-108795EPSS 0.3%

    A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in …

  5. 2.1CVE-2026-108575EPSS 0.2%

    A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The manipulation of the argument api_key leads to improper authori…

  6. 9.8CVE-2026-62022EPSS 0.3%

    Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

  7. 9.8CVE-2026-39801EPSS 0.4%

    Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.

  8. 8.2CVE-2026-96341EPSS 0.3%

    Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.

  9. 9.8CVE-2026-106610EPSS 0.4%

    Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.

  10. 7.2CVE-2026-106608EPSS 0.3%

    Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2.

  11. 5.6CVE-2026-96539EPSS 0.1%

    Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

  12. 7.1CVE-2026-106145EPSS 0.1%

    In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to regis…

  13. 8.1CVE-2026-95594EPSS 0.2%

    Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0.

  14. 7.2CVE-2026-48197EPSS 0.4%

    Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.

  15. 8.8CVE-2026-39775EPSS 0.3%

    Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

  16. 8.8CVE-2026-39774EPSS 0.2%

    Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.

  17. 10.0CVE-2026-39773EPSS 0.3%

    Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.

  18. 7.2CVE-2026-39765EPSS 0.4%

    Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

  19. 9.8CVE-2026-39761EPSS 0.4%

    Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

  20. 9.8CVE-2026-39753EPSS 0.4%

    Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

  21. 8.8CVE-2026-105070EPSS 0.3%

    Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

  22. 8.8CVE-2026-105058EPSS 0.3%

    Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

  23. 7.2CVE-2026-104757EPSS 0.3%

    Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.

  24. 8.1CVE-2026-104405EPSS 0.3%

    Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

  25. 2.1CVE-2026-105621EPSS 0.2%

    A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Up…

  26. 2.0CVE-2026-105611EPSS 0.2%

    A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail…

  27. 2.0CVE-2026-105610EPSS 0.2%

    A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Para…

  28. 5.5CVE-2026-105571EPSS 0.3%

    A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper a…

  29. 5.5CVE-2026-105382EPSS 0.3%

    A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount of the file php/controller.php of the component Account Administration. This mani…

  30. 9.3CVE-2026-105284EPSS 0.8%

    A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorizatio…

  31. 9.8CVE-2026-103752EPSS 0.3%

    Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.

  32. 8.8CVE-2026-103068EPSS 0.2%

    Subscriber Privilege Escalation in ByteCoreStack &#8211; MCP Connector for AI Tools <= 1.2.2 versions.

  33. 8.5CVE-2026-103286EPSS 0.2%

    Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access …

  34. 6.6CVE-2026-103494EPSS 0.2%

    In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes

  35. 2.1CVE-2026-103534EPSS 0.3%

    A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper acc…

  36. 6.9CVE-2026-103532EPSS 0.4%

    A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password…

  37. 7.2CVE-2026-102129EPSS 0.8%

    A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise a…

  38. 9.3CVE-2026-103470EPSS 0.3%

    In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.

  39. 7.2CVE-2026-97245EPSS 0.3%

    Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

  40. 6.3CVE-2026-96821EPSS 0.2%

    Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

  41. 7.2CVE-2026-96815EPSS 0.3%

    Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

  42. 9.8CVE-2026-96350EPSS 0.4%

    Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.

  43. 7.5CVE-2026-94178EPSS 0.3%

    Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.

  44. 2.0CVE-2026-102846EPSS 0.2%

    A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Config…

  45. 6.1CVE-2026-102674EPSS 0.2%

    Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from a sandboxed top-level document did not inherit that document's…

  46. 5.5CVE-2026-102293EPSS 0.3%

    A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to …

  47. 7.4CVE-2026-101860EPSS 0.5%

    A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginInstaller::addSudoers of the file src/RaspAP/Plugins/PluginInstaller.php of the component sudo Configuration. Performing a manipula…

  48. 2.1CVE-2026-101144EPSS 0.2%

    A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitatio…

  49. 6.5CVE-2026-93540EPSS 0.2%

    A privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations options, the resulting namespace metadata update was not subject to the same authorizatio…

  50. 5.5CVE-2026-101054EPSS 0.3%

    A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_supplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation o…