4422 matches found
EUVD-2026-63841
Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...
CVE-2026-59799
Apache CloudStack contains an Improper Privilege Management vulnerability in its Two-factor authentication plugin . The root cause is a missing privilege check in the two-factor authentication disable flow, which allows an attacker to bypass the 2FA disable flow . Affected versions: 4.18.0.0 thro...
EUVD-2026-63717
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management...
EUVD-2026-63633
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...
EUVD-2026-63674
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-16997
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...
CVE-2026-16937
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-17145
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 are vulnerable to remote arbitrary code execution due to improper privilege management. CVSS 9.8 critical; no patch version or exploit details provided. IBM support page is the sole reference; monitor for updates. Exploitation status is not provided.
CVE-2026-16997
CVE-2026-16997 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with no privileges but requiring user interaction can execute arbitrary commands due to improper privilege management , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 H...
CVE-2026-16937 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-16937
CVE-2026-16937 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . A local attacker with low privileges can exploit improper privilege management to gain elevated privileges, resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). The attack vector is l...
CVE-2026-16923
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
EUVD-2026-63383
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
CVE-2026-16923 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
PT-2026-79156
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management...
PT-2026-79171
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...
CVE-2026-76259
On Windows, a low-privileged local user can bind to Splunk's management port before the service starts, intercept authentication tokens from child processes, and escalate privileges to compromise all data and system integrity accessible to the Splunk service account. No in-the-wild exploitation i...
CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-32802
Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...