CVE-2026-102478

In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalation. It was possible for the built-in role to be weakened and the attacker's account added to a privileged team. This wa...

CVE-2026-102478

In affected versions of Octopus Server , an authenticated user with permissions to modify roles can achieve privilege escalation . The vulnerability is caused by the improper validation of unsafe equivalence in inputs , allowing an attacker to weaken built-in roles and add their account to a priv...

CVE-2026-102478

In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalation. It was possible for the built-in role to be weakened and the attacker's account added to a privileged team. This wa...

CVE-2026-47102-PoC

CVE-2026-47102 — LiteLLM 権限昇格 via /user/update LiteLLM v1.83.7（v1.83.10 より前のバージョン）の /user/update エンドポイントは、このエンドポイントへのアクセス権を持つ 低権限ユーザーが自分のアカウントを更新する際に userrole フィールドを proxyadmin に変更でき、 未承認の権限昇格を実現します。 フィールド| 値 ---|--- CVE| CVE-2026-47102 CVSS v3.1| 8.8 HIGH — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CW...

CVE-2022-38577-Processmaker

このリポジトリはアーカイブされ、次の場所に移動しました: https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - ユーザープロファイルの権限昇格 CVE-2022-38577 ProcessMaker v3.5.4以前のバージョンでは、ユーザープロファイルページに安全でない権限が含まれていることが判明しました。この脆弱性により、攻撃者は一般ユーザーを管理者に昇格させることができます。 このエクスプロイトはMetasploitモジュールProcessMaker Plugin Upload -...

cve-2023-1874

CVE-2023-1874 免責事項 このスクリプトは、ホワイトハットおよび教育目的専用に設計されています。テストする権限のないデバイス、または所有していないデバイスに対してこれを使用する行為は、すべて自己責任です。このスクリプトの作者は、このスクリプトを使用してあなたが行う一切の行為について責任を負いません。あなたの行動はあなた自身のものです。 説明 CVE-2023-1874 は、WP Data Access プラグインのバージョン 5.3.7 以前における脆弱性です。攻撃者はプロフィール更新時に wpdarole オプションを指定することで、権限を昇格させることができます。 NIS...

CVE-2026-100629

A flaw was found in Capgo backend. This vulnerability allows an authenticated administrator to perform unauthorized role modifications and demote higher-privileged accounts. When updating role bindings, the application validates the rank of the newly assigned role against the caller's privileges,...

CVE-2026-91929

Flowise versions before 3.1.4 contain cross-tenant authorization gaps in Enterprise endpoints that fail to verify resource ownership before operations. Attackers with Enterprise access can delete arbitrary workspaces, invite themselves into other organizations, modify cross-org roles, and abuse...

CVE-2026-53527

LeafWiki (a self-hosted wiki) versions 0.1.0 through 0.10.0 contain a privilege escalation vulnerability in the user update API. An authenticated user can modify their own account role, escalating from a regular role (e.g., viewer) to admin . The attack requires a valid authenticated account, mea...

WordPress Eventin plugin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation vulnerability

Contributor+ User Role and Meta Modification via Speaker Creation vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin WP Event SOlution versions 4.1.21...

CVE-2026-13173

The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata...

CVE-2026-13173 Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation

The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata...

CVE-2026-13173 Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation

The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata...

CVE-2026-13173

The Eventin WordPress plugin (versions before 4.1.21 ) is vulnerable to an authorization flaw during the speaker creation process. The plugin fails to verify if the current user has the necessary permissions to edit other users' profiles before assigning roles and updating user metadata. This all...

CVE-2026-13173: Missing Authorization

The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata...

Vulnerability in core server (CVE-2026-14666)

PostgreSQL row security caching disregards role modifications Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse...

CVE-2026-69090

CVE-2026-69090 (Admidio) affects Admidio prior to 5.0.11. The issue is failure to validate target organization membership in role handlers, enabling authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations. Attackers can supply a role UUID ...

CVE-2026-69090 Admidio before 5.0.11 Cross-Organization Role Modification

Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations. Attackers can supply a role UUID from another organization to groupsroles.php handle...

CVE-2026-69090 Admidio before 5.0.11 Cross-Organization Role Modification

Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations. Attackers can supply a role UUID from another organization to groupsroles.php handle...

CVE-2026-69090: Missing Authorization

Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations. Attackers can supply a role UUID from another organization to groupsroles.php handle...