Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: privilege-escalation Clear
ID Title
CVE-2026-15017 Privilege Escalation in wordpress (CVE-2026-15017)
vulnerability in wordpress (CVE-2026-15017). Successful exploitation can lead to full system takeover. Exploitable via ``new_role``.
CVE-2026-16607 Privilege Escalation in privilege-escalation (CVE-2026-16607)
vulnerability in privilege-escalation (CVE-2026-16607). Successful exploitation can lead to full system takeover.
CVE-2026-14985 Path Traversal in privilege-escalation (CVE-2026-14985)
path traversal in privilege-escalation (CVE-2026-14985). Successful exploitation can lead to full system takeover.
CVE-2026-65603 Privilege Escalation in privilege-escalation (CVE-2026-65603)
vulnerability in privilege-escalation (CVE-2026-65603). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.12` or later.
CVE-2026-65015 Authorization Flaw in n8n (CVE-2026-65015)
vulnerability in n8n (CVE-2026-65015). Successful exploitation can lead to full system takeover. Exploitable via ``agents``. Mitigation: upgrade to `2.29.8` or later.
CVE-2026-57599 Privilege Escalation in privilege-escalation (CVE-2026-57599)
vulnerability in privilege-escalation (CVE-2026-57599). Successful exploitation can lead to full system takeover.
CVE-2026-65016 Vulnerability in n8n (CVE-2026-65016)
vulnerability in n8n (CVE-2026-65016). Successful exploitation can lead to full system takeover. Exploitable via ``N8N_SSO_SCOPES_PROVISION_INSTANCE_ROLE``. Mitigation: upgrade to `2.29.8` or later.
CVE-2026-14551 Vulnerability in privilege-escalation (CVE-2026-14551)
vulnerability in privilege-escalation (CVE-2026-14551). Successful exploitation can lead to full system takeover.
CVE-2026-58435 Vulnerability in code.gitea.io/gitea (CVE-2026-58435)
vulnerability in code.gitea.io/gitea (CVE-2026-58435). Risk of unauthorized operations or information disclosure. Exploitable via ``UserID``. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-56654 Vulnerability in code.gitea.io/gitea (CVE-2026-56654)
vulnerability in code.gitea.io/gitea (CVE-2026-56654). Successful exploitation can lead to full system takeover. Exploitable via `POST /users/{username}/tokens`. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-16454 Vulnerability in privilege-escalation (CVE-2026-16454)
vulnerability in privilege-escalation (CVE-2026-16454). Risk of unauthorized operations or information disclosure.
CVE-2026-28316 Vulnerability in privilege-escalation (CVE-2026-28316)
vulnerability in privilege-escalation (CVE-2026-28316). Successful exploitation can lead to full system takeover.
CVE-2026-28317 Vulnerability in privilege-escalation (CVE-2026-28317)
vulnerability in privilege-escalation (CVE-2026-28317). Successful exploitation can lead to full system takeover.
CVE-2026-28312 Vulnerability in privilege-escalation (CVE-2026-28312)
vulnerability in privilege-escalation (CVE-2026-28312). Successful exploitation can lead to full system takeover.
CVE-2026-28307 Vulnerability in privilege-escalation (CVE-2026-28307)
vulnerability in privilege-escalation (CVE-2026-28307). Successful exploitation can lead to full system takeover.
CVE-2026-28310 Vulnerability in privilege-escalation (CVE-2026-28310)
vulnerability in privilege-escalation (CVE-2026-28310). Successful exploitation can lead to full system takeover.
CVE-2026-28306 Vulnerability in privilege-escalation (CVE-2026-28306)
vulnerability in privilege-escalation (CVE-2026-28306). Successful exploitation can lead to full system takeover.
CVE-2026-28302 Vulnerability in privilege-escalation (CVE-2026-28302)
vulnerability in privilege-escalation (CVE-2026-28302). Successful exploitation can lead to full system takeover.
CVE-2026-8933 Vulnerability in privilege-escalation (CVE-2026-8933)
vulnerability in privilege-escalation (CVE-2026-8933). Successful exploitation can lead to full system takeover.
CVE-2026-16401 Privilege Escalation in privilege-escalation (CVE-2026-16401)
vulnerability in privilege-escalation (CVE-2026-16401). Successful exploitation can lead to full system takeover.
CVE-2026-16396 Privilege Escalation in privilege-escalation (CVE-2026-16396)
vulnerability in privilege-escalation (CVE-2026-16396). Successful exploitation can lead to full system takeover.
CVE-2026-16379 Privilege Escalation in privilege-escalation (CVE-2026-16379)
vulnerability in privilege-escalation (CVE-2026-16379). Successful exploitation can lead to full system takeover.
CVE-2026-16371 Privilege Escalation in privilege-escalation (CVE-2026-16371)
vulnerability in privilege-escalation (CVE-2026-16371). Successful exploitation can lead to full system takeover.
CVE-2026-16372 Privilege Escalation in privilege-escalation (CVE-2026-16372)
vulnerability in privilege-escalation (CVE-2026-16372). Successful exploitation can lead to full system takeover.
CVE-2026-16366 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153.
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153.
CVE-2026-16365 Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153.
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153.
CVE-2026-65007 Vulnerability in privilege-escalation (CVE-2026-65007)
vulnerability in privilege-escalation (CVE-2026-65007). Confidential information can be exposed externally.
CVE-2026-13439 Privilege Escalation in wordpress (CVE-2026-13439)
vulnerability in wordpress (CVE-2026-13439). Successful exploitation can lead to full system takeover.
CVE-2026-44231 Information Disclosure in privilege-escalation (CVE-2026-44231)
vulnerability in privilege-escalation (CVE-2026-44231). Confidential information can be exposed externally.
CVE-2026-63102 Vulnerability in privilege-escalation (CVE-2026-63102)
vulnerability in privilege-escalation (CVE-2026-63102). Risk of unauthorized operations or information disclosure.
CVE-2026-35198 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-35198)
cross-site scripting in privilege-escalation (CVE-2026-35198). Successful exploitation can lead to full system takeover.
CVE-2026-21824 Vulnerability in privilege-escalation (CVE-2026-21824)
vulnerability in privilege-escalation (CVE-2026-21824). Successful exploitation can lead to full system takeover.
CVE-2026-63763 Vulnerability in privilege-escalation (CVE-2026-63763)
vulnerability in privilege-escalation (CVE-2026-63763). Successful exploitation can lead to full system takeover.
CVE-2025-71392 Command Injection in privilege-escalation (CVE-2025-71392)
command injection in privilege-escalation (CVE-2025-71392). Successful exploitation can lead to full system takeover.
CVE-2023-54366 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT,...
SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT,...
CVE-2026-47870 Privilege Escalation in privilege-escalation (CVE-2026-47870)
vulnerability in privilege-escalation (CVE-2026-47870). Confidential information can be exposed externally. Mitigation: upgrade to `32.1.2` or later.
CVE-2026-47868 Privilege Escalation in privilege-escalation (CVE-2026-47868)
vulnerability in privilege-escalation (CVE-2026-47868). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `32.1.2` or later.
CVE-2025-59866 Vulnerability in privilege-escalation (CVE-2025-59866)
vulnerability in privilege-escalation (CVE-2025-59866). Risk of unauthorized operations or information disclosure.
CVE-2019-25764 Vulnerability in privilege-escalation (CVE-2019-25764)
vulnerability in privilege-escalation (CVE-2019-25764). Risk of unauthorized operations or information disclosure.
CVE-2026-15982 Privilege Escalation in wordpress (CVE-2026-15982)
vulnerability in wordpress (CVE-2026-15982). Successful exploitation can lead to full system takeover.
CVE-2026-62202 Authorization Flaw in privilege-escalation (CVE-2026-62202)
vulnerability in privilege-escalation (CVE-2026-62202). Successful exploitation can lead to full system takeover.
CVE-2026-40106 Vulnerability in privilege-escalation (CVE-2026-40106)
vulnerability in privilege-escalation (CVE-2026-40106). Risk of unauthorized operations or information disclosure.
CVE-2026-14956 Privilege Escalation in wordpress (CVE-2026-14956)
vulnerability in wordpress (CVE-2026-14956). Successful exploitation can lead to full system takeover.
CVE-2026-11889 Vulnerability in privilege-escalation (CVE-2026-11889)
vulnerability in privilege-escalation (CVE-2026-11889). Data can be tampered with by attackers.
CVE-2026-61389 Out-of-Bounds Write in privilege-escalation (CVE-2026-61389)
out-of-bounds write in privilege-escalation (CVE-2026-61389). Successful exploitation can lead to full system takeover.
CVE-2026-60063 Out-of-Bounds Write in privilege-escalation (CVE-2026-60063)
out-of-bounds write in privilege-escalation (CVE-2026-60063). Successful exploitation can lead to full system takeover.
CVE-2026-6423 Privilege Escalation in privilege-escalation (CVE-2026-6423)
vulnerability in privilege-escalation (CVE-2026-6423). Risk of unauthorized operations or information disclosure.
CVE-2026-15103 Privilege Escalation in wordpress (CVE-2026-15103)
vulnerability in wordpress (CVE-2026-15103). Successful exploitation can lead to full system takeover. Exploitable via ``group_id``.
CVE-2026-13741 Privilege Escalation in wordpress (CVE-2026-13741)
vulnerability in wordpress (CVE-2026-13741). Successful exploitation can lead to full system takeover. Exploitable via ``digits_reg_userrole``.
CVE-2026-14961 Vulnerability in privilege-escalation (CVE-2026-14961)
vulnerability in privilege-escalation (CVE-2026-14961). Confidential information can be exposed externally. Exploitable via ``Tdelo64.sys``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →