A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
1,014 vulnerabilities with CWE-266
CVE-2026-2105
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Department Management
CVSS 6.3
CVE-2026-2079
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Menu Management
CVSS 6.3
CVE-2026-2078
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Permission Management
CVSS 6.3
CVE-2026-2077
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Role Management Handler
CVSS 6.3
CVE-2026-2076
MEDIUM
yeqifu warehouse < 2025-10-06 - Improper Authorization in User Management Endpoint
CVSS 6.3
CVE-2026-2075
MEDIUM
yeqifu warehouse - Incorrect Privilege Assignment in Role-Permission Binding Handler
CVSS 6.3
CVE-2026-2015
MEDIUM
Portabilis i-Educar <2.10 - Privilege Escalation
CVSS 6.3
CVE-2026-2010
MEDIUM
Sanluan PublicCMS <4.0-6.202506.d - Privilege Escalation
CVSS 4.2
CVE-2026-2009
MEDIUM
SourceCodester Gas Agency Management System 1.0 - Info Disclosure
CVSS 6.3
CVE-2026-1964
MEDIUM
Wekan < 8.21 - Improper Access Control in REST Endpoint
CVSS 4.3
CVE-2026-1963
MEDIUM
WeKan < 8.21 - Improper Access Control in Attachment Storage
CVSS 6.3
CVE-2026-1962
MEDIUM
Wekan < 8.21 - Improper Access Controls in Attachment Migration
CVSS 6.3
CVE-2026-1898
MEDIUM
Wekan < 8.21 - Improper Access Control in LDAP User Sync
CVSS 6.3
CVE-2026-1896
MEDIUM
WeKan <8.20 - Improper Access Controls
CVSS 6.3
CVE-2026-1895
MEDIUM
WeKan <8.20 - Improper Access Controls
CVSS 6.3
CVE-2026-1894
MEDIUM
Wekan < 8.21 - Improper Authorization via REST API Checklist Items Manipulation
CVSS 6.3
CVE-2026-1892
MEDIUM
Wekan < 8.21 - Improper Authorization via setBoardOrgs Function
CVSS 5.0
CVE-2026-1733
MEDIUM
crmeb < 5.6.3 - Improper Authorization via Order ID Manipulation
CVSS 4.3
CVE-2026-1702
MEDIUM
Pet Grooming Management Software 1.0 - Incorrect Privilege Assignment in User Management
CVSS 6.3
CVE-2026-1597
MEDIUM
Bdtask SalesERP <20260116 - Auth Bypass
CVSS 6.3
CVE-2026-1550
MEDIUM
PHPGurukul Hospital Management System 1.0 - Incorrect Privilege Assignment in Admin Dashboard Page
CVSS 6.3
CVE-2026-1411
MEDIUM
Beetel 777VR1 Firmware < 01.00.09_55 - Incorrect Privilege Assignment via UART Interface
CVSS 6.1
CVE-2026-1193
MEDIUM
MineAdmin 1.x/2.x - Improper Authorization in View Interface
CVSS 6.3
CVE-2026-1141
MEDIUM
PHPGurukul News Portal 1.0 - Incorrect Privilege Assignment in Add Sub-Admin Page
CVSS 6.3
CVE-2026-1112
MEDIUM
PublicCMS < 5.202506.d - Improper Authorization via Trade Address Deletion Endpoint
CVSS 5.4
Details
Vulnerabilities
1,014