1553 matches found
CVE-2026-102129
A privilege escalation vulnerability exists in the user-provisioning interface of Kiteworks Core . The root cause is a failure to verify if the requesting administrator possesses the authorization required to grant specific roles. Consequently, an administrator with limited permissions for role c...
CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment
A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...
CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment
A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...
CVE-2024-54363-Exploit
CVE-2024-54363-Exploit La vulnerabilidad de asignación incorrecta de privilegios en nssTheme Wp NssUser Register permite la escalada de privilegios. Este problema afecta a Wp NssUser Register: desde n/a hasta 1.0.0. Descripción El complemento nssTheme Wp NssUser Register para WordPress es...
Incorrect Privilege Assignment
Overview anyio is a High level compatibility layer for multiple asynchronous event loop implementations Affected versions of this package are vulnerable to Incorrect Privilege Assignment via the openprocess function in src/anyio/core/subprocesses.py, where the extragroups parameter is silently...
CVE-2026-63349: Incorrect Privilege Assignment
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In 4.14.0, AnyIO accepts the POSIX extragroups argument in anyio.runprocess and anyio.openprocess, but openprocess forwards the group argument to the backend instead of extragroups...
VulnCheck KEV: CVE-2026-54196
Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: from n/a through 3.6.1...
CVE-2026-73461: Incorrect Privilege Assignment
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as...
CVE-2026-91930: Incorrect Privilege Assignment
Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tenant, allowing authenticated users to supply arbitrary organization IDs. Attackers can add themselves as organization owners, create workspaces, and gain administrative access to victim...
CVE-2026-90812
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...
CVE-2026-86830
Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...
CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...
EUVD-2026-77770
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...
CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...
CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment
A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...
CVE-2026-90812
cosmicstack-labs mercury-agent (versions up to 1.2.0 ) contains a vulnerability in the checkShellCommand function within src/capabilities/permissions.ts , part of the Shell Command Permission component. Manipulation of this function leads to incorrect privilege assignment , and the attack can be ...
CVE-2026-86830
CVE-2026-86830 is an incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center, versions prior to 1.5.1 . An authenticated remote user with application-level access can read, approve, modify, or revoke arbitrary access requests , enabling them to ob...
CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...
EUVD-2026-77769
Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...
CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...