A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
814 vulnerabilities with CWE-266
CVE-2026-1712
MEDIUM
Hypr Server < 10.7 - Privilege Escalation
CVE-2026-20110
MEDIUM
Cisco Ios XE Software < 16.6.1 - Denial of Service
CVSS 6.5
CVE-2026-4617
HIGH
SourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorization
CVSS 7.3
CVE-2026-4548
MEDIUM
mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization
CVSS 6.3
CVE-2026-4514
MEDIUM
PbootCMS Backend UserController.php access control
CVSS 6.3
CVE-2026-27542
CRITICAL
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability
CVSS 9.8
CVE-2026-4194
HIGH
D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control
CVSS 7.3
CVE-2026-4193
HIGH
D-Link DIR-823G goahead UpdateClientInfo access control
CVSS 7.3
CVE-2026-4180
HIGH
D-Link DIR-816 1.10CNB05 - Auth Bypass
CVSS 7.3
CVE-2026-4013
MEDIUM
SourceCodester Pharmacy System 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3817
MEDIUM
Patients Waiting Area Queue 1.0 - Auth Bypass
CVSS 5.3
CVE-2026-3796
MEDIUM
Qi-ANXIN QAX Virus Removal - Privilege Escalation
CVSS 5.3
CVE-2026-3764
HIGH
SourceCodester Client DBMS 1.0 - Auth Bypass
CVSS 7.3
CVE-2026-3762
HIGH
SourceCodester CDMS 1.0/3.1 - Auth Bypass
CVSS 7.3
CVE-2026-3761
MEDIUM
SourceCodester Client DBMS 1.0 - Auth Bypass
CVSS 5.4
CVE-2026-3738
MEDIUM
SourceCodester Pet Grooming 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3737
MEDIUM
SourceCodester Pet Grooming 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3734
HIGH
SourceCodester Client DBMS 1.0 - Auth Bypass
CVSS 7.3
CVE-2026-3724
MEDIUM
Patients Waiting Area Queue 1.0 - Auth Bypass
CVSS 6.3
CVE-2026-3675
MEDIUM
Freedom Factory dGEN1 <20260221 - Auth Bypass
CVSS 5.3
CVE-2026-3674
MEDIUM
Freedom Factory dGEN1 <20260221 - Auth Bypass
CVSS 5.3
CVE-2026-3671
LOW
Freedom Factory dGEN1 <20260221 - Auth Bypass
CVSS 3.3
CVE-2026-3670
MEDIUM
Freedom Factory dGEN1 <=20260221 - Privilege Escalation
CVSS 5.3
CVE-2026-3669
MEDIUM
Freedom Factory dGEN1 <20260221 - Privilege Escalation
CVSS 5.3
CVE-2026-3668
LOW
Freedom Factory dGEN1 <=20260221 - Auth Bypass
CVSS 3.1
Details
Vulnerabilities
814