Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threats Tagged 'cwe-266'

View all threats tagged with 'cwe-266'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cwe-266

Threats Tagged 'cwe-266'

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-12164: CWE-266 Incorrect privilege assignment in Fortra File Integrity Monitoring (FIM)CVE-2026-12164
0

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Join the discussion
CVE-2026-54807: CWE-266 Incorrect Privilege Assignment in ThemeGrill Registration Form for WooCommerceCVE-2026-54807
0

Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.

Join the discussion
CVE-2026-54805: CWE-266 Incorrect Privilege Assignment in sbouey Falang multilanguageCVE-2026-54805
0

Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.

Join the discussion
CVE-2026-54196: CWE-266 Incorrect Privilege Assignment in Jetmonsters JetFormBuilderCVE-2026-54196
0

Subscriber Privilege Escalation in JetFormBuilder <= 3.6.1 versions.

Join the discussion
CVE-2026-49058: CWE-266 Incorrect Privilege Assignment in LoginPress LoginPress ProCVE-2026-49058
0

Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.

Join the discussion
CVE-2026-39546: CWE-266 Incorrect Privilege Assignment in Techspawn MultiLocaCVE-2026-39546
0

Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions.

Join the discussion
CVE-2025-69179: CWE-266 Incorrect Privilege Assignment in Theme passion Support Ticket Management SystemCVE-2025-69179
0

Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.

Join the discussion
CVE-2025-69138: CWE-266 Incorrect Privilege Assignment in Jthemes GenemyCVE-2025-69138
0

Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.

Join the discussion
CVE-2025-59563: CWE-266 Incorrect Privilege Assignment in SONAAR MUSIC SonaarCVE-2025-59563
0

Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.

Join the discussion
CVE-2026-27395: CWE-266 Incorrect Privilege Assignment in Schiocco Support BoardCVE-2026-27395
0

Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

Join the discussion

Showing 1 to 10 of 27 results

Filters:Tag: cwe-266
Page 1 of 3
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses