CVE-2026-63571

The bc-csharp library by Legion of the Bouncy Castle Inc. is vulnerable to improper verification of cryptographic signatures in the attribute certificate path validator (PkixAttrCertPathValidator , also used by PkixAttrCertPathBuilder ) in versions before 2.7.0 . The root cause is that RFC 3281 v...

CVE-2026-63571 Attribute certificate path validation does not verify the attribute certificate's signature

Improper verification of cryptographic signature in the attribute certificate path validator PkixAttrCertPathValidator, also used by PkixAttrCertPathBuilder in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to have a forged X.509 attribute certificate accepted as...

CVE-2025-2304

Camaleon CMS -p Аргументы -t, --target Базовый URL цели -u, --username Действительное имя низкоуровневого пользователя -p, --password Пароль пользователя Ход эксплойта 1. Получить страницу входа и извлечь CSRF-токен 2. Аутентифицироваться с предоставленными учётными данными 3. Перейти на страницу...

CVE-2026-13610

CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Некорректное управление привилегиями | Неаутентифицированная регистрация с выбранной атакующим служебной ролью → раскрытие PHI пациентов Обзор Критическая уязвимость в WordPress-плагине KiviCare – Clinic & Patient Management...

CVE-2025-71421: Improper Privilege Management

UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege to escalate their own role to administrator. Attackers can submit their own account identifier with a role parameter set to...

BIT-MONGODB-2026-82053 Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

CVE-2026-87759: Improper Privilege Management

The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisi...

PT-2026-89294

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

EUVD-2026-72066

The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2018-18694

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:12+00:00| seen| https://t.me/hackingAttack/29057 2026-09-01 20:02:15+00:00| seen| https://t.me/hackingAttack/27123 2026-09-01 20:02:17+00:00| seen| https://t.me/hackingAttack/27117 2026-09-01 20:02:17+00:00| seen|...

PT-2026-83392

Name of the Vulnerable Software and Affected Versions MemberHero WordPress plugin versions prior to 7.0 Description The plugin fails to restrict account fields during the frontend registration process. This allows unauthenticated attackers to register a new user with an arbitrary role, such as...

CVE-2026-78271

CVE-2026-78271 is an Editor Privilege Escalation vulnerability in the WordPress FluentCRM Pro plugin, affecting versions 3.1.12 and earlier . The flaw was discovered by Ananda Dhakal via Patchstack. It allows an authenticated user with the Editor role to escalate privileges, rated CVSS 7.2 (HIGH)...

CVE-2026-78271 WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

CVE-2026-53527 LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update

LeafWiki is a self-hosted wiki. Versions 0.1.0 through 0.10.0 have a privilege escalation vulnerability in the user update API. An authenticated user could update their own account role and escalate privileges from a regular user, such as viewer, to admin. Exploitation requires a valid...

CVE-2026-45790 Dokploy: Invitation Role Escalation Allows Organization Takeover

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/organization.ts allows a user with member:create permission to invite an account with the owner role, while...

CVE-2026-45790

In Dokploy versions prior to 0.29.6, a user with only member:create permission could invoke the organization.inviteMember tRPC procedure to invite an account with the owner role, and packages/server/src/services/user.ts allowed creating accounts with arbitrary roles. Since owner roles cannot be d...

CVE-2026-75481

SkyPilot's service account permission update endpoint lacks authorization checks, letting any authenticated user (PR:L) escalate a newly created service account to admin role and authenticate with its bearer token for full administrative control over all users and workspaces. CVSS 8.8 HIGH. A PoC...

CVE-2026-75481 SkyPilot Authentication Bypass via Service Account Role Escalation

SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users...

SUSE CVE-2026-64954

Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECTCLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider. This allows a user who can run...