The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
3,092 vulnerabilities with CWE-269
CVE-2026-7977
MEDIUM
Google Chrome < 148.0.7778.96 - Same Origin Policy Bypass via Canvas
CVSS 6.3
CVE-2026-7971
MEDIUM
Google Chrome < 148.0.7778.96 - Site Isolation Bypass via ORB
CVSS 6.3
CVE-2026-40001
MEDIUM
Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client
CVSS 5.2
CVE-2026-7778
MEDIUM
runZero Platform dashboard configuration exposure
CVSS 5.0
CVE-2026-24072
HIGH
Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr
CVSS 8.8
CVE-2026-7641
HIGH
Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields
CVSS 8.8
CVE-2026-37525
HIGH
AGL app-framework-binder <v19.90.0 - Privilege Escalation
CVSS 7.8
CVE-2026-6389
HIGH
IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability
CVSS 8.8
CVE-2026-30769
HIGH
EnTech Taiwan TVicPort 4.0 - Privilege Escalation
CVSS 7.8
CVE-2026-5141
HIGH
Improper Access Control in TUBITAK BILGEM's Pardus Software Center
CVSS 8.8
CVE-2026-6741
HIGH
LatePoint <= 5.4.1 - Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability
CVSS 8.8
CVE-2026-7106
HIGH
Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation
CVSS 8.8
CVE-2026-41359
HIGH
OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence
CVSS 7.1
CVE-2026-3621
HIGH
IBM WebSphere Application Server Liberty is affected by identity spoofing
CVSS 7.5
CVE-2026-1726
MEDIUM
IBM Guardium Key Lifecycle Manager 4.1-5.1 - Privilege Management Vulnerability
CVSS 4.8
CVE-2026-6386
MEDIUM
Missing large page handling in pmap_pkru_update_range()
CVSS 6.2
CVE-2026-6769
HIGH
Privilege escalation in the Debugger component
CVSS 8.8
CVE-2026-6761
HIGH
Privilege escalation in the Networking component
CVSS 8.8
CVE-2026-6750
HIGH
Privilege escalation in the Graphics: WebRender component
CVSS 8.8
CVE-2026-31369
LOW
Privilege Bypass in PcManager
CVSS 3.2
CVE-2026-31368
HIGH
Privilege Bypass in AiAssistant
CVSS 7.8
CVE-2026-39386
HIGH
Neko has Self-service Privilege Escalation for Authenticated Users
CVSS 8.8
CVE-2026-29648
HIGH
OpenXiangShan NEMU - Privilege Escalation
CVSS 8.8
CVE-2026-29647
MEDIUM
OpenXiangShan NEMU - Privilege Escalation
CVSS 6.5
CVE-2026-35154
MEDIUM
Dell PowerProtect Data Domain 7.7.1.0-8.7.0.0 - Privilege Escalation
CVSS 6.3
Details
Vulnerabilities
3,092
Exploit Likelihood
Medium