36426 matches found
CVE-2026-18571
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...
CVE-2026-22622
Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...
EUVD-2026-50610
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
BIT-DOTNET-SDK-2026-50650 .NET Framework Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
BIT-DOTNET-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
BIT-DOTNET-SDK-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
BIT-DOTNET-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65002
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65020
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65004
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-56163
The vulnerability CVE-2026-56163 affects Microsoft Azure Kubernetes Service. It arises from missing authentication for a critical function, enabling an unauthenticated attacker to achieve network-based elevation of privilege within the service. The reported impact is high for confidentiality, int...
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
...
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
...
CVE-2026-58630
CVE-2026-58630 concerns Azure App Service on Azure Stack Hub. The issue is improper access control that allows an unauthenticated attacker to elevate privileges over a network. Impact is high for confidentiality and integrity; CVSS 3.1 base score 10.0. Connected sources confirm the name and core ...
EUVD-2026-48601
Server-side request forgery ssrf in Data Quality allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-57106
CVE-2026-57106 describes a server-side request forgery (SSRF) in the Data Quality component that can allow an unauthenticated attacker to elevate privileges over a network. The confirmed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H with a base score of 10.0 (CRITICAL), indicating networ...