cve.bz

CWE-266: Incorrect Privilege Assignment, page 5

Filter

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-266 at MITRE

Ask an AI about CWE-266

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-266: Incorrect Privilege Assignment and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/266.html and https://cve.bz/cve/cwe/266?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2026-73347EPSS 0.5%

    Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.

  2. 2.1CVE-2026-75978EPSS 0.4%

    A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the function DataSourceController.add of the file DataSourceController.java of the component QueryerFactory. Such manipulat…

  3. 7.8CVE-2026-67846EPSS 0.2%

    Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations. The raw mstatus.SUM value participates in the read and …

  4. 8.2CVE-2026-73350EPSS 0.4%

    Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.

  5. 6.3CVE-2026-68568EPSS 0.3%

    Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.

  6. 8.8CVE-2026-28191EPSS 0.4%

    Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0.

  7. 2.1CVE-2024-14045EPSS 0.4%

    A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a man…

  8. 7.9CVE-2026-15218EPSS 0.7%

    A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identi…

  9. 2.1CVE-2026-19996EPSS 0.4%

    A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to impr…

  10. 2.1CVE-2026-19986EPSS 0.4%

    A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the component Event Listener. This manipulation of the argument …

  11. 2.1CVE-2026-19928EPSS 0.4%

    A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead…

  12. 2.1CVE-2026-19918EPSS 0.3%

    A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only b…

  13. 2.3CVE-2026-19893EPSS 0.5%

    A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack…

  14. 2.3CVE-2026-19841EPSS 0.3%

    A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out re…

  15. 2.0CVE-2026-19835EPSS 0.5%

    A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can …

  16. 8.7CVE-2026-72826EPSS 0.5%

    The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey. The self-target path of requireApiKeyPermission() requires only the baseline…

  17. 8.7CVE-2026-72840EPSS 0.4%

    OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL gr…

  18. 9.3CVE-2026-72839EPSS 0.6%

    filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full creat…

  19. 5.4CVE-2026-58435EPSS 0.3%

    Gitea LFS Deploy-Key Privilege Escalation

  20. 7.7CVE-2026-66661EPSS 0.3%

    Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.

  21. 9.8CVE-2026-66424EPSS 0.5%

    Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

  22. 8.1CVE-2026-61979EPSS 0.4%

    Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

  23. 8.8CVE-2026-28161EPSS 0.4%

    Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.

  24. 8.1CVE-2026-27543EPSS 0.4%

    Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.

  25. 3.3CVE-2025-9486EPSS 0.3%

    GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed a user with a pending membership to receive permissions…

  26. 9.3CVE-2026-64639EPSS 0.6%

    Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.

  27. 5.3CVE-2026-71468EPSS 0.4%

    A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authentic…

  28. 8.8CVE-2026-18950EPSS 0.5%

    A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef` field, allowing a user to specify an arbitra…

  29. 7.6CVE-2026-18621EPSS 0.5%

    A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with el…

  30. 8.1CVE-2026-15467EPSS 0.6%

    A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user…

  31. 7.1CVE-2026-19381EPSS 0.2%

    A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper pri…

  32. 5.5CVE-2026-19376EPSS 0.5%

    A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to…

  33. 5.1CVE-2026-19360EPSS 0.4%

    A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunction of the component Lambda Function Handler. Performing a manipulation results in improper privilege management. The att…

  34. 5.1CVE-2026-19359EPSS 0.4%

    A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component Lambda Function Handler. Such manipulation leads to improper access controls. T…

  35. 5.3CVE-2026-19358EPSS 0.3%

    A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contac…

  36. 2.0CVE-2026-19244EPSS 0.5%

    A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results i…

  37. 7.1CVE-2026-19195EPSS 0.2%

    A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack need…

  38. 7.1CVE-2026-19193EPSS 0.2%

    A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to b…

  39. 7.1CVE-2026-19192EPSS 0.2%

    A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access contr…

  40. 7.1CVE-2026-19191EPSS 0.2%

    A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulat…

  41. 7.1CVE-2026-19190EPSS 0.2%

    A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permis…

  42. 7.1CVE-2026-19189EPSS 0.2%

    A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipulation results in i…

  43. 9.8CVE-2026-66662EPSS 0.5%

    Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.

  44. 7.2CVE-2026-65559EPSS 0.5%

    Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.

  45. 9.8CVE-2026-65507EPSS 0.5%

    Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.

  46. 7.2CVE-2026-28183EPSS 0.5%

    Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.

  47. 8.8CVE-2026-28111EPSS 0.4%

    Contributor Privilege Escalation in Forminator <= 1.56.0 versions.

  48. 2.1CVE-2026-19007EPSS 0.4%

    A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedElevatedSender of the file src/auto-reply/reply/reply-elevated.ts. This manipulation causes improper privilege management.…

  49. 2.1CVE-2026-19005EPSS 0.4%

    A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in i…

  50. 2.1CVE-2026-18998EPSS 0.4%

    A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the component delegate_task Tool. Executing a manipulation can lead to improper autho…