CVE-2026-78267: CWE-266 Incorrect Privilege Assignment in Cozmoslabs TranslatePress

This vulnerability in TranslatePress (<=3.3.2) involves incorrect privilege assignment, enabling unauthenticated attackers to escalate their privileges within the system. The flaw is categorized under CWE-266 and has a critical CVSS 3.1 score of 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No official patch or remediation level has been provided yet, and no known exploits are reported in the wild.

Successful exploitation allows an unauthenticated attacker to gain elevated privileges, potentially compromising the confidentiality, integrity, and availability of the affected system. This could lead to full system compromise or unauthorized administrative access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to vulnerable instances and monitor for suspicious activity related to privilege escalation attempts.