CWE-269

3,092 vulnerabilities with CWE-269

CVE-2026-33906 HIGH

Ella Core has Privilege Escalation via Database Restore by NetworkManager role

CVSS 7.2

CVE-2026-2931 HIGH

Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change

CVSS 8.8

CVE-2026-30892 NONE

Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

CVE-2026-4824 HIGH

Enter Software Iperius Backup Backup Job Configuration File privileges management

CVSS 7.0

CVE-2026-28889 MEDIUM

Apple Xcode <26.4 - Privilege Escalation

CVSS 6.2

CVE-2026-20607 MEDIUM

macOS <14.8.5 - Privilege Escalation

CVSS 4.0

CVE-2026-33509 HIGH

pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration

CVSS 7.5

CVE-2026-33334 CRITICAL

Vikunja Desktop: Any frontend XSS escalates to Remote Code Execution due to nodeIntegration

CVSS 9.6

CVE-2026-29111 MEDIUM

systemd v239-v249 - Memory Corruption

CVSS 5.5

CVE-2026-4314 HIGH

The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module

CVSS 8.8

CVE-2026-3629 HIGH

Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields

CVSS 8.1

CVE-2026-2375 MEDIUM

App Builder – Create Native Android & iOS Apps On The Flight <= 5.5.10 - Unauthenticated Privilege Escalation via 'role' Parameter

CVSS 6.5

CVE-2026-31836 HIGH

Mass Assignment Privilege Escalation in Checkmate

CVSS 8.1

CVE-2026-30888 LOW

Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint

CVSS 2.2

CVE-2026-32760 CRITICAL

File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin

CVSS 9.8

CVE-2026-30874 HIGH

OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation

CVSS 7.8

CVE-2026-25770 CRITICAL

Wazuh has Privilege Escalation to Root via Cluster Protocol File Write

CVSS 9.1

CVE-2026-32106 MEDIUM

StudioCMS <0.4.3 - Privilege Escalation

CVSS 4.7

CVE-2026-2640 MEDIUM

Lenovo PC Manager - Privilege Escalation

CVSS 5.5

CVE-2026-24510 MEDIUM

Dell AWCC <6.12.24.0 - Privilege Escalation

CVSS 6.7

CVE-2026-31852 CRITICAL

Jellyfin jellyfin-ios - Code Injection

CVSS 10.0

CVE-2026-30902 HIGH

Zoom Client for Windows - Privilege Escalation

CVSS 7.8

CVE-2026-1993 HIGH

ExactMetrics 7.1.0-9.0.2 - Privilege Escalation

CVSS 8.8

CVE-2026-2631 CRITICAL

Datalogics Ecommerce Delivery <2.6.60 - Privilege Escalation

CVSS 9.8

CVE-2026-31834 HIGH

Umbraco 15.3.1-16.5.0/17.2.1 - Privilege Escalation

CVSS 7.2