opnsense-uidfield-system-uid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-uidfield-system-uid0 Write-up: https://abraxaslabs.tech/research/opnsense-uidfield-system-uid0 opnsense-uidfield-system-uid0 Class: Privilege leftover Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.or...

CVE-2026-9290

CVE-2026-9290 — WP User Manager LFI to RCE Exploit Pre-Auth Path Traversal via 'tab' Parameter → Local File Inclusion Overview CVE-2026-9290 is a high-severity CVSS 7.5 unauthenticated Local File Inclusion vulnerability in the WP User Manager – User Profile Builder & Membership WordPress plugin ≤...

CVE-2026-124413

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

EUVD-2026-123373

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

CVE-2026-124413 WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

CVE-2026-124413

The WP User Manager plugin for WordPress (versions

WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HeeDong Cho in WordPress Plugin WP User Manager versions = 2.10.4...

CVE-2026-124413: WP User Manager: Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly…

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

PT-2026-145143

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

CVE-2026-96037

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally...

CVE-2026-95987

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-121782

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96037

A heap-based buffer overflow vulnerability exists in the Windows User Manager Service , which could allow an authorized attacker to achieve local privilege escalation . No specific technical root cause details, affected versions, or exploit links are provided in the documents beyond the general v...

CVE-2026-95987

A Use after free vulnerability exists in the Windows User Manager Service , which could allow an authorized attacker to achieve local privilege escalation . While the provided documents confirm the vulnerability and its impact, specific technical details regarding the root cause or affected versi...

EUVD-2026-121767

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally...

PT-2026-144282

Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally...

PT-2026-144253

Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally...

CVE-2026-121575

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

EUVD-2026-119244

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...

CVE-2026-121575 WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4...