CVE-2026-90812

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-86830

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

EUVD-2026-77770

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-90812

cosmicstack-labs mercury-agent (versions up to 1.2.0 ) contains a vulnerability in the checkShellCommand function within src/capabilities/permissions.ts , part of the Shell Command Permission component. Manipulation of this function leads to incorrect privilege assignment , and the attack can be ...

CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-86830

CVE-2026-86830 is an incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center, versions prior to 1.5.1 . An authenticated remote user with application-level access can read, approve, modify, or revoke arbitrary access requests , enabling them to ob...

EUVD-2026-77769

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-78330 Apache Syncope: Privilege escalation for admin user via JWT authentication

Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed at least protocol and key, an attacker can obtain admin privileges after completing a successful authentication and obtaining a valid low-privileges JWT...

CVE-2024-54363-Exploit

CVE-2024-54363-エクスプロイト nssTheme Wp NssUser Register における不適切な権限割り当ての脆弱性により、権限昇格が可能になります。この問題は、Wp NssUser Register の n/a から 1.0.0 までのバージョンに影響します。 説明 WordPress 用プラグイン nssTheme Wp NssUser Register は、不適切な権限割り当て の問題に対して脆弱であり、権限昇格 を引き起こします。この脆弱性により、攻撃者は適切な認証なしに管理者権限を持つ新しいユーザーを登録できます。この問題は、バージョン 1.0.0...

CVE-2026-8303

Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5...

EUVD-2026-76114

Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5...

CVE-2026-8303

An incorrect privilege assignment vulnerability in TUBITAK BILGEM 's Pardus-software (a Turkish software product developed by the Software Technologies Research Institute) allows local privilege escalation . The issue affects versions before 1.0.5 , and upgrading to 1.0.5 remediates it. The CVSS ...

CVE-2026-8303 Privilege Escalation in TUBITAK BILGEM's Pardus-software

Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5...

PT-2026-89879

Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-software allows Privilege Escalation. This issue affects Pardus-software: before 1.0.5...

Security Advisory 0163

Security Advisory 0163 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73461 CVSSv3.1 Base Score: 8.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 9.4...

CVE-2026-81769

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

EUVD-2026-69927

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

CVE-2026-81769 WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

BIT-NEO4J-ENTERPRISE-2026-1497 Incorrect privilege assignment in composite databases

Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intends to give a user an access to a remote database constituent "namespace.name" will inadvertently grant access to any...

CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...