CVE-2026-82842: Improper Privilege Management

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-86552: Improper Privilege Management

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface...

CVE-2026-92541: Improper Privilege Management

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promoteusers capability in its front-end import functionality, allowing users with only the createusers capability to change the role of existing users, including promoting them to administrator...

CVE-2026-86553: Improper Privilege Management

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication parameters, an attacker can directly call the backend interface /account/verify.serv to obtain the real account ID...

PT-2026-95935

Name of the Vulnerable Software and Affected Versions aiyiyi121 SxDevOps versions 1.0 through 1.1 Description An issue exists in the UserSerializer component within the backend/rbac/serializers.py file. A remote attacker can manipulate the update function to cause improper privilege management...

PT-2026-96005

Name of the Vulnerable Software and Affected Versions CodeAstro QR Code Attendance Management System version 1.0 Description Improper privilege management exists in the Save function within the app/Controllers/UserController.php file. A remote attacker can manipulate the role id argument to gain...

PT-2026-96004

Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions prior to 1.0.33 Description Improper privilege management exists within the Template Import Endpoint. The issue resides in the importTemplate function located in the src/services/templateService.ts file, allowing for...

CVE-2026-86814: Improper Privilege Management

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

CVE-2026-76554: Improper Privilege Management

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowing users granted a delegated WP Import Export Lite WordPress plugin before 3.9.35 permission, who cannot otherwise manage...

CVE-2026-84089

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84089 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-83441

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84089 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-83410

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 is affected by an improper privilege management flaw that allows a local attacker with low privileges to gain elevated privileges without user interaction. The vulnerability is scored CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availabilit...

Improper Privilege Management

Grav is vulnerable to Improper Privilege Management. The vulnerability is due to insufficient access restrictions on the access field in the core group blueprint, which allows a delegated admin.users operator to grant themselves super-admin privileges and gain access to scheduler and Twig...

CVE-2026-82893: Improper Privilege Management

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...