CVE-2026-56828 Shopper: read-only team permissions allow administrator creation and permission escalation

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain authorization gaps after the earlier team-settings authorization fix. A staff member with only viewusers and accessdashboard can mutate permissions, create an administrator, or...

CVE-2026-56828

The Shopper headless e-commerce admin panel (versions 2.8.0 through 2.8.1 ) contains authorization gaps in three Livewire admin components. A staff member with only view_users and access_dashboard permissions can exploit these gaps to perform high-privilege actions. Specifically, in Permissions.p...

CVE-2026-56828 Shopper: read-only team permissions allow administrator creation and permission escalation

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain authorization gaps after the earlier team-settings authorization fix. A staff member with only viewusers and accessdashboard can mutate permissions, create an administrator, or...

Shopper Labs Shopper authorization issue vulnerability

Shopper Labs Shopper versions prior to 2.8.0 and 2.8.1 contain an authorization issue vulnerability. This vulnerability stems from an authorization gap in three Shopper Livewire management components. Employees possessing only viewusers and accessdashboard permissions can modify permissions, crea...

Google Android Permission Elevation Vulnerability (CNVD-2026-31523)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which stems from a logical error in the removePermission function. Attackers can exploit this vulnerability to escalate their privileges...

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Google Android security vulnerabilities

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a logical error in the removePermission function. This flaw may lead to an increase in local permissions...

ASB-A-321711213

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-225880325

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...