45905 matches found
EUVD-2026-69385
Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-58566
Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
PT-2026-84444
A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the...
VulnCheck KEV: CVE-2026-9055
The Booking for Appointments and Events Calendar – Amelia Premium plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set...
CVE-2026-58566: Incorrect Authorization
Dell PowerStore, an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-73740: Improper Privilege Management
A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the...
MiracleLinux 9 : dotnet8.0-8.0.130-1.el9_8.ML.1 (AXSA:2026-1685:17)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1685:17 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...
MiracleLinux 8 : dotnet8.0-8.0.130-1.el8_10.ML.1 (AXSA:2026-1674:16)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1674:16 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...
When Context Gets Root: Privilege Escalation in LLM Harnesses
Instruction hierarchy is a model-side defense that assigns instructions different levels of privilege according to their sources. These levels constrain which content may direct model behavior. During agent execution, however, agent harnesses construct context for each model invocation. This...
CVE-2026-76018
A flaw was found in Google Chrome's Import component. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by tricking a user into processing a specially crafted file. Successful exploitation could lead to privilege elevation, allowing the attacker to...
MiracleLinux 9 : dotnet9.0-9.0.120-1.el9_8.ML.1 (AXSA:2026-1650:17)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1650:17 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...
MiracleLinux 9 : dotnet10.0-10.0.111-1.el9_8.ML.1 (AXSA:2026-1654:18)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1654:18 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...
Fedora 43 : chromium (2026-129176284e)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-129176284e advisory. Update to 151.0.7922.173 CVE-2026-76017: Use after free in Chromoting CVE-2026-76018: Privilege elevation in Import CVE-2026-76019: Incorrect...
MAL-2026-15674 Malicious code in bamru (npm)
This package presents itself as a "System binary configuration tool" — that is its entire manifest description, with keywords system, binary, util and config, an author of "SysDev", and no repository. What it actually installs is a concealed clipboard and screen harvester that elevates itself to...
CVE-2026-78477
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
Fedora 44 : chromium (2026-7cee1b8755)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7cee1b8755 advisory. Update to 151.0.7922.173 CVE-2026-76017: Use after free in Chromoting CVE-2026-76018: Privilege elevation in Import CVE-2026-76019: Incorrect...
CVE-2026-12878: Improper Privilege Management
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions...
Security information for Hitachi Disk Array Systems
Overview CVE-2026-33828 | Windows Device Health Attestation DHA Elevation of Privilege Vulnerability CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-40404 | Windows Universal Disk Format File System Driver UDFS Elevation of Privilege...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...