CWE-266 vulnerabilities

Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.

Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0.

CVE-2026-58435 is a medium severity vulnerability in Gitea Open Source Git Server affecting versions up to 1.26.4. It involves a privilege escalation issue related to the Large File Storage (LFS) deploy-key functionality. The vulnerability is classified under CWE-266 (Incorrect Privilege Assignment) and CWE-639 (Authorization Bypass Through User-Controlled Key). No public exploits or vendor patches are currently documented.

Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.

Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-66662 is a critical vulnerability in Frontend Admin by DynamiApps versions up to and including 3.29.10. It allows unauthenticated users to escalate privileges due to incorrect privilege assignment (CWE-266). The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-65559 is a high-severity vulnerability in the Order Delivery Date for WooCommerce plugin by tychesoftwares. It affects versions up to and including 4.6.0 and involves incorrect privilege assignment that allows shop managers to escalate their privileges. The vulnerability has a CVSS score of 7.2, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-65507 is a critical vulnerability in Sergey AIWU versions up to and including 1.5.6 that allows unauthenticated privilege escalation due to incorrect privilege assignment (CWE-266). This flaw enables an attacker with no prior authentication to gain elevated privileges, potentially leading to full system compromise. The vulnerability has a CVSS v3.1 score of 9.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.

CVE-2026-28111 is a high-severity vulnerability in WPMU DEV's Forminator plugin, affecting versions up to and including 1.56.0. It involves incorrect privilege assignment that allows users with Contributor-level access to escalate their privileges. The vulnerability has a CVSS score of 8.8, indicating a significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently documented. There are no known exploits in the wild at this time.

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments.

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a token for a ServiceAccount with cluster-wide administrative authority. This leads to a privilege escalation, allowing the tenant administrator to gain full control over the cluster.

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.