EUVD-2026-83441

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-83410

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 is affected by an improper privilege management flaw that allows a local attacker with low privileges to gain elevated privileges without user interaction. The vulnerability is scored CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availabilit...

CVE-2026-81445

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81442

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access...

CVE-2026-20287

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-9055

CVE-2026-9055 — Amelia Booking Plugin の認証なし権限昇格 Sentinel AI Defense による調査レポート。 防御的分析のみを目的としており、本脆弱性に対する実用的なエクスプロイトや PoC はここでは公開されていません。 Amelia Premium WordPress 予約プラグインにおける認証なし権限昇格の脆弱性で、アカウントを一切持たない攻撃者が、顧客/プロバイダー更新エンドポイントの多段階悪用を通じて、匿名訪問者からサイト全体の管理者へと権限を昇格させることが可能です。 目次 概要 影響を受けるバージョン 技術的詳細（根本原因）...

Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a DBADM privileged user under certain conditions (CVE-2026-87958)

Summary IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a database administration authority DBADM privileged user under certain conditions CVE-2026-87958 Vulnerability Details CVEID:CVE-2026-87958 DESCRIPTION: IBM Db2 11.5.0 through...

CVE-2026-62183

CVE-2026-62183 — Apache Syncope 사용자 셀프 서비스를 통한 권한 상승 Apache Syncope의 부적절한 권한 관리CWE-269. 인증된 하위 권한 사용자가 사용자 셀프 서비스 API를 통해 임의의 역할role및 그룹 멤버십, 외부 리소스, 새로운 영역realm을 스스로 부여할 수 있습니다 — 다른 모든 코드 경로에서는 관리자 권한이 필요한 작업이며 — 이를 통해 ID 저장소의 관리자가 될 수 있습니다. 이 저장소는 이 취약점에 대한 기술 참조 자료 입니다: 근본 원인, 런타임에서 확인된 개념...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 인증되지 않은 권한 상승 역할 주입 === Beelze zeroday 1diot9 === 📋 취약점 정보 필드| 세부 정보 ---|--- CVE ID| CVE-2026-5118 CVSS 점수| 9.8 치명적 CVSS 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-269 — 부적절한 권한 관리 플러그인| Divi Form Builder by Divi Engine 영향 받는 버전| 모든 버전 ≤...

CVE-2026-90856

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

CVE-2026-90856

SourceCodester College Notes Gallery Management System 1.0 is affected by an improper privilege management vulnerability in the Registration Flow component. The flaw resides in the signup.php file, where manipulation of the role argument allows a remote, unauthenticated attacker to gain elevated ...

EUVD-2026-78259

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

CVE-2026-90787

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

EUVD-2026-77479

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

CVE-2026-73470

Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm subtree under the delegation management was granted for. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, fro...

CVE-2026-90523

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

EUVD-2026-77021

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

CVE-2026-90501

CVE-2026-90501 affects the lenve vhr application (version 1.0-SNAPSHOT ). The vulnerability resides in the HrInfoController.updateHr function within HrMapper.xml , where manipulation of the Password argument leads to improper privilege management (mass assignment privilege escalation, per the ass...