CWE-266: Incorrect Privilege Assignment, page 4
Filter
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
What the weakness is: CWE-266 at MITRE
Ask an AI about CWE-266
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-266: Incorrect Privilege Assignment and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/266.html and https://cve.bz/cve/cwe/266?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2026-86500EPSS 0.3%
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin
- 8.8CVE-2026-86482EPSS 0.4%
In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation
- 2.1CVE-2026-86285EPSS 0.4%
A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The…
- 5.5CVE-2026-86275EPSS 0.5%
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in …
- 2.1CVE-2026-86228EPSS 0.4%
A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/Ai…
- 2.1CVE-2026-86212EPSS 0.5%
A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has b…
- 9.4CVE-2026-86153EPSS 0.7%
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the atta…
- 2.1CVE-2026-85514EPSS 0.4%
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument api_key_api.user…
- 2.1CVE-2026-85513EPSS 0.4%
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_provided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC back…
- 2.1CVE-2026-85401EPSS 0.4%
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executin…
- 5.3CVE-2026-85241EPSS 0.4%
A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV2API of the file cmd/api/src/api/registration/v2.go of the component Graph Write Endpoint. Executing a manipulation can lead to i…
- 9.8CVE-2026-84814EPSS 0.5%
Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
- 7.1CVE-2026-84756EPSS 0.3%
Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions.
- 5.3CVE-2026-84807EPSS 0.3%
Kimai (kimai/kimai) before 2.65.0 contains a business logic / improper authorization vulnerability in the default team creation endpoints. An authenticated user with project permission-management privileges can create or use a customer, pr…
- 8.8CVE-2026-81769EPSS 0.4%
Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1.
- 9.8CVE-2026-81294EPSS 0.5%
Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
- 5.5CVE-2026-84115EPSS 0.5%
A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/connections of the component JWT Refresh Token Handler. Performing a manipulation of the argument Bearer results in impr…
- 7.5CVE-2026-81297EPSS 0.3%
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
- 2.1CVE-2026-82835EPSS 0.4%
A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument file_id can lead to improper access controls. The attack can be ex…
- 2.1CVE-2026-82834EPSS 0.4%
A security flaw has been discovered in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. This affects the function LabelList of the f…
- 2.1CVE-2026-82833EPSS 0.3%
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Labeling Pipeline Module to Annotate a Document Automatically up to 1.8.5. Affected by this issue is the function ExampleDet…
- 2.1CVE-2026-82818EPSS 0.3%
A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resource Assignment Handler. Executing a manipulation of the argument tenantId can lead…
- 2.1CVE-2026-82817EPSS 0.3%
A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management API. Performing a manipulation of the argument tenantId resu…
- 5.5CVE-2026-82815EPSS 0.5%
A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper acce…
- 8.5CVE-2026-82807EPSS 0.2%
A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack ne…
- 4.6CVE-2026-82671EPSS 0.2%
A vulnerability has been found in IObit Unlocker 1.3.0.12. This vulnerability affects the function ZwTerminateProcess in the library IObitUnlocker.sys of the component IRP_MJ_DEVICE_CONTROL Handler. The manipulation leads to improper privi…
- 4.8CVE-2026-82670EPSS 0.1%
A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The …
- 9.3CVE-2026-82628EPSS 0.2%
A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNu…
- 1.3CVE-2026-82594EPSS 0.3%
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remo…
- 2.1CVE-2026-82553EPSS 0.3%
A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file student_dashboard.php of the component Student Dashboard. T…
- 2.3CVE-2026-82486EPSS 0.3%
A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access contro…
- 7.2CVE-2026-78271EPSS 0.5%
Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.
- 9.8CVE-2026-32566EPSS 0.5%
Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
- 9.8CVE-2026-78267EPSS 0.5%
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
- 8.8CVE-2026-32561EPSS 0.4%
Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
- 7.2CVE-2026-21756EPSS 0.5%
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.
- 9.8CVE-2026-66648EPSS 0.5%
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
- 9.8CVE-2026-32558EPSS 0.5%
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
- 9.8CVE-2026-28165EPSS 0.5%
Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
- 2.1CVE-2026-78158EPSS 0.4%
A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack rem…
- 2.1CVE-2026-78115EPSS 0.4%
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit_user_account.php of the component User Account Update. Such manipulation of the argument id/use…
- 5.3CVE-2026-77795EPSS 0.3%
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpo…
- 2.1CVE-2026-77686EPSS 0.5%
A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the argument ID causes improper authorization. The attack may be …
- 7.1CVE-2026-75910EPSS 0.5%
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying acc…
- 2.1CVE-2026-77036EPSS 0.4%
A vulnerability was found in elunez eladmin up to 2.7. The impacted element is the function EmailController/AliPayController/GeneratorController/GenConfigController. The manipulation results in improper authorization. The attack can be lau…
- 5.3CVE-2026-76999EPSS 0.3%
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function add_grade of the file /index.php. Performing a manipulation of the argument student_id results in impro…
- 9.8CVE-2026-66682EPSS 0.5%
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.
- 9.8CVE-2025-15689EPSS 0.5%
Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.
- 8.1CVE-2026-11861EPSS 0.4%
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is…
- 9.8CVE-2026-73390EPSS 0.5%
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.