BIT-DOTNET-SDK-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

BIT-DOTNET-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

BIT-DOTNET-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-65002

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-65020

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-65004

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-56163

The vulnerability CVE-2026-56163 affects Microsoft Azure Kubernetes Service. It arises from missing authentication for a critical function, enabling an unauthenticated attacker to achieve network-based elevation of privilege within the service. The reported impact is high for confidentiality, int...

CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2026-58630

CVE-2026-58630 concerns Azure App Service on Azure Stack Hub. The issue is improper access control that allows an unauthenticated attacker to elevate privileges over a network. Impact is high for confidentiality and integrity; CVSS 3.1 base score 10.0. Connected sources confirm the name and core ...

CVE-2026-57106

CVE-2026-57106 describes a server-side request forgery (SSRF) in the Data Quality component that can allow an unauthenticated attacker to elevate privileges over a network. The confirmed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H with a base score of 10.0 (CRITICAL), indicating networ...

EUVD-2026-48601

Server-side request forgery ssrf in Data Quality allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability

...

CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability

...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-12736

The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::saveoption REST route POST /wp-json/wpify-woo/v1/option passing the request-supplied 'option' and 'data' parameters directly to updateoption without a...

CVE-2026-56167

Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...

CVE-2026-58275

Technical details about CVE-2026-58275 are not publicly available in the provided documents. No confirmed affected product versions, root cause, impact, or patch information is disclosed here. Monitor for updates from official sources.