cve.bz

CWE-266: Incorrect Privilege Assignment, page 7

Filter

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-266 at MITRE

Ask an AI about CWE-266

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-266: Incorrect Privilege Assignment and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/266.html and https://cve.bz/cve/cwe/266?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.2CVE-2026-33390EPSS 0.4%

    An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through th…

  2. 5.3CVE-2026-26053EPSS 0.2%

    An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Co…

  3. 5.3CVE-2026-14794EPSS 0.4%

    A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function actionGetNewUsersData of the file src/controllers/ChartsController.php of the component Charts Endpoint. This manipulation of the argument us…

  4. 6.9CVE-2026-14792EPSS 0.6%

    A security vulnerability has been detected in Formbricks 5.0.0. This impacts an unknown function of the file apps/web/modules/survey/link/actions.ts of the component Survey Handler. The manipulation leads to improper access controls. Remot…

  5. 5.5CVE-2026-14778EPSS 0.5%

    A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the component Enrollment Management. The manipulation of the argu…

  6. 5.5CVE-2026-14719EPSS 0.5%

    A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argume…

  7. 2.1CVE-2026-14693EPSS 0.4%

    A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.php. Executing a manipulation can lead to improper authorizat…

  8. 5.5CVE-2026-14690EPSS 0.5%

    A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of…

  9. 8.7CVE-2026-59093EPSS 0.7%

    Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. The assignRoleToUser and assignRoleToGroup handlers (POST /authz/users/{id}/assign and /authz/gr…

  10. 8.8CVE-2026-5136EPSS 0.6%

    A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary rol…

  11. 9.8CVE-2026-57692EPSS 0.5%

    Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.

  12. 7.1CVE-2026-53902EPSS 0.3%

    MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership endpoint. An authenticated user can modify their group membership without proper authorization checks, allowing privil…

  13. 8.7CVE-2026-56247EPSS 0.4%

    Capgo before 12.128.2 allows org admins to assign org-scoped RBAC roles at app scope without validating role scope compatibility, including to pending invitees. Attackers can pre-seed malformed high-privilege bindings that survive invite a…

  14. 6.5CVE-2026-4629EPSS 0.5%

    A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability by injecting a hardcoded role mapper into any client. This action allows the user to bypass existing scope restrictions …

  15. 6.5CVE-2026-12388EPSS 0.4%

    A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An administrator with limited permissions to manage identity pro…

  16. 1.3CVE-2026-13591EPSS 0.3%

    A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/managers/ChannelBridge.ts of the component Contact Tracking. This manipulation of the argument _channelType causes impr…

  17. 5.5CVE-2026-13568EPSS 0.5%

    A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component User Registration Endpoint. This manipulation of the argument rol…

  18. 7.3CVE-2026-22078EPSS 0.1%

    Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.

  19. 2.1CVE-2026-13544EPSS 0.4%

    A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/users of the component API. This manipulation causes improper access controls. The attack can be initiated remotely. The …

  20. 2.9CVE-2026-13524EPSS 0.4%

    A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the component MCP OAuth Local Callback Server. The manipulatio…

  21. 1.3CVE-2026-13511EPSS 0.3%

    A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a man…

  22. 7.1CVE-2026-49413EPSS 0.1%

    The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this flag is not yet set at the point where the auxiliary vector is constructed, so AT_SECURE was incorrec…

  23. 6.5CVE-2026-45259EPSS 0.1%

    sigqueue(2) was marked as permitted in capability mode with the introduction of Capsicum in 2011, but the implementation of kern_sigqueue did not include a capability mode check restricting signal delivery to the calling process's own PID.…

  24. 9.8CVE-2026-56033EPSS 0.5%

    Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.

  25. 9.8CVE-2026-56030EPSS 0.5%

    Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.

  26. 9.8CVE-2026-56028EPSS 0.5%

    Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions.

  27. 8.8CVE-2026-56010EPSS 0.4%

    Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

  28. 8.8CVE-2026-56008EPSS 0.4%

    Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions.

  29. 4.4CVE-2026-12164EPSS 0.1%

    Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the …

  30. 1.9CVE-2026-12823EPSS 0.2%

    A security flaw has been discovered in Browserbase Skills up to 20260526. This impacts an unknown function of the component Autobrowse Trace Artifact Handler. The manipulation results in incorrect default permissions. The attack requires a…

  31. 7.0CVE-2026-56251EPSS 0.4%

    Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users to elevate privileges from admin to super_admin. Attackers can exploit the insufficient RLS enforcement to gain unauth…

  32. 2.1CVE-2026-12799EPSS 0.4%

    A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_view_users of the file litellm/proxy/management_endpoints/internal_user_endpoints.py of the component Incomplete Fix CVE-…

  33. 7.1CVE-2026-12786EPSS 0.2%

    A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access co…

  34. 7.1CVE-2026-12784EPSS 0.2%

    A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires …

  35. 7.1CVE-2026-12782EPSS 0.2%

    A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. The manipulation results in improper access controls. The at…

  36. 7.1CVE-2026-12781EPSS 0.2%

    A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack ne…

  37. 7.1CVE-2026-12780EPSS 0.2%

    A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to improper access controls. The attack needs to b…

  38. 7.1CVE-2026-12779EPSS 0.2%

    A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation results in improper access controls. The …

  39. 7.1CVE-2026-12778EPSS 0.2%

    A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack mu…

  40. 1.3CVE-2026-12771EPSS 0.4%

    A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/user_api_key_auth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The a…

  41. 2.1CVE-2026-12770EPSS 0.6%

    A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation ca…

  42. 6.9CVE-2026-12529EPSS 0.3%

    A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Affected is an unknown function of the file /index.php of the component Student Self-Registration Endpoint. The man…

  43. 9.8CVE-2026-54807EPSS 0.3%

    Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.

  44. 8.8CVE-2026-54805EPSS 0.4%

    Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.

  45. 6.8CVE-2026-54196EPSS 0.2%

    Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1.

  46. 9.8CVE-2026-49058EPSS 0.3%

    Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.

  47. 7.6CVE-2026-39546EPSS 0.3%

    Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.

  48. 9.8CVE-2026-27395EPSS 0.3%

    Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

  49. 9.8CVE-2025-69179EPSS 0.4%

    Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.

  50. 8.8CVE-2025-69138EPSS 0.4%

    Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.