CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 ロールインジェクションによる認証なしの権限昇格 === Beelze zeroday 1diot9 === 📋 脆弱性情報 フィールド| 詳細 ---|--- CVE ID| CVE-2026-5118 CVSS スコア| 9.8 Critical CVSS ベクター| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-269 — Improper Privilege Management プラグイン| Divi Form Builder by...

CVE-2026-94425

CVE-2026-94425 affects the Moore Threads MTT S80 Driver Package 340.150 , specifically the IOCTL Handler in the driver library mtdispkm64.sys (function sub_140006F0C). The root cause is improper privilege management , allowing a local attacker with low privileges to escalate access. The CVSS 3.1 ...

CVE-2026-94048

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94048

CodeAstro QR Code Attendance Management System 1.0 is affected by an improper privilege management vulnerability in the Save function of app/Controllers/UserController.php. Manipulation of the role_id argument allows a remote, authenticated user with high privileges to escalate access, with a sco...

CVE-2026-94048 CodeAstro QR Code Attendance Management System UserController.php save privileges management

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

EUVD-2026-83782

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

EUVD-2026-83781

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

EUVD-2026-83704

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

CVE-2026-13610

CVE-2026-13610 KiviCare – 诊所与患者管理系统 CWE-269（不当权限管理） | 使用攻击者选择的员工角色进行未认证注册 → 患者 PHI 泄露 概述 KiviCare – 诊所与患者管理系统 WordPress 插件（4.5.1 及之前的所有版本）中存在严重漏洞，允许未认证攻击者 使用自选密码注册医生 （kiviCaredoctor）或前台 （kiviCarereceptionist）账户，并将其映射到攻击者选择的诊所。 该漏洞的存在是因为公共注册端点直接从请求体中获取 userrole 参数，且其验证白名单包含诊所员工角色： 关卡| 作用| 结果...

CVE-2026-84089

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84089 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-83441

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-83410

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 is affected by an improper privilege management flaw that allows a local attacker with low privileges to gain elevated privileges without user interaction. The vulnerability is scored CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availabilit...

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81442

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access...