CVE-2026-77538

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...

CVE-2026-77545

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77545

CVE-2026-77545 is a CRITICAL (CVSS 9.0) vulnerability in certain devices running UniFi OS , rated by Ubiquiti (the CNA). An attacker with network access , low privileges , and user interaction can exploit active debug code left enabled on the device to escalate privileges within the affected UniF...

EUVD-2026-66387

TarsWeb enforces its per-application roles by calling AuthService from individual controller methods, and four methods in app/controller/patch/PatchController.js make no such call. uploadAndPublish accepts a package upload and then builds and dispatches a deployment task to every server matching...

WordPress InfusedWoo Pro plugin <= 5.1.17 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin InfusedWoo Pro versions = 5.1.17...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77541

UniFi Network Application (Ubiquiti) is affected by an Improper Access Control vulnerability that allows an attacker with network access and high privileges to escalate privileges within the application. The flaw carries a CVSS 3.1 score of 9.1 (Critical) , with a network attack vector, low compl...

CVE-2026-77538

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...

CVE-2026-77538

An Improper Access Control vulnerability in the UniFi Connect Application (Ubiquiti) allows a network-based attacker with no prior privileges to escalate privileges within the application. The CVSS 3.1 score is 8.2 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L, indicating a low-comp...

CVE-2026-77536

CVE-2026-77536 is a Critical (CVSS 9.9) Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A malicious actor with network access and low privileges can exploit this flaw to escalate privileges within affected UniFi OS devices or instances, resulting in hi...

CVE-2026-77536

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-80182

A flaw was found in OpenStack Keystone where delegation boundary enforcement is incomplete across trust, application credential, and OAuth1 authorization endpoints. Tokens obtained via delegated authentication methods, such as OAuth1 access tokens or custom Keystone authentication plugins, can...

CVE-2026-62941

A flaw was found in Incus, a container and virtual machine manager. A race condition when copying instances across projects allows dangerous configuration keys to bypass project restrictions, enabling privilege escalation and container escape. Mitigation No mitigation is needed as Incus is not...

CVE-2026-62940

A flaw was found in Incus, a container and virtual machine manager. During instance migration, security-critical configuration overrides bypass project restrictions, allowing a restricted user to escalate privileges and escape the container to the host. Mitigation No mitigation is needed as Incus...

CVE-2026-77534

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77534

CVE-2026-77534 is an Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges within affected UniFi OS devices or instances. The CNA-assigned CVSS 3.1 score is 9.9 (CRITICAL) , ref...

CVE-2025-61228

CVE-2025-61228 Avviso Questo problema sembra essere più grave di quanto suggerito dallo sviluppatore, quindi non voglio che questa parte venga dimenticata tra le righe. Lo sviluppatore ha osservato sul suo blog: Questo può accadere solo se un programma in esecuzione sul tuo sistema cerca SuperDup...

CVE-2026-78237

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...

CVE-2026-78236

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...

WordPress Mang Board WP plugin <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability

Authenticated Subscriber+ Privilege Escalation to Forged Authentication Cookie vulnerability discovered by daroo in WordPress Plugin Mang Board WP versions = 2.3.7...