Threats Tagged 'cwe-267'

CVE-2026-18858 is a low-severity vulnerability affecting IBM i versions 7.5 and 7.6. It allows a local authenticated attacker to obtain information from a privileged file when using SSH. The vulnerability is related to improper privilege definitions involving unsafe actions (CWE-267). There is no indication of impact on integrity or availability, and no known exploits in the wild have been reported. Patch status is not confirmed from the provided data.

Privilege Defined With Unsafe Actions vulnerability in Drupal Content Moderation Notifications allows Privilege Escalation. This issue affects Content Moderation Notifications versions: from 0.0.0 to 3.9.0.

CVE-2025-36255 affects IBM System Storage DS8A00 and DS8900F products in specified versions. The vulnerability allows an authenticated user to create a user account with privileged roles due to improper privilege definitions involving unsafe actions. This could lead to high impact on confidentiality, integrity, and availability. The CVSS score is 7.5, indicating a high severity vulnerability.

CVE-2026-10090 is a critical privilege escalation vulnerability in Red Hat Advanced Cluster Management for Kubernetes (ACM) 2.11. A user with namespace-scoped 'edit' privileges can create Channel and Subscription resources that the app-subscription controller applies with elevated cluster-level authority. This flaw allows inclusion of cluster-scoped resources, such as ClusterRoleBindings granting cluster-admin privileges, bypassing intended role restrictions. The vulnerability contradicts ACM documentation and can lead to full cluster-admin access.

An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins: from 7.x-1.0 through 7.x-1.2.

CVE-2026-9560 is a critical privilege escalation vulnerability in OpenVPN Connect versions 3.5.1 through 3.8.1 on macOS. It allows an attacker with local access to execute arbitrary commands with elevated privileges via a local inter-process communication (IPC) channel in the background service. The vulnerability is related to improper handling of IPC leading to command injection. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.

CVE-2026-42406 is a high-severity vulnerability in F5 BIG-IP and BIG-IQ systems. It allows a highly privileged, authenticated attacker with at least the Certificate Manager role to modify configuration objects that enable running arbitrary commands. This vulnerability affects multiple versions including 21.0.0, 17.5.0, 17.1.0, and 16.1.

Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are recommended to upgrade to version 5.0.7+, which fixes this issue.

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.

HighVulnerabilityUnited StatesGermanyJapan+7#cve#cve-2026-2460#cwe-267

A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.

HighVulnerabilityUnited StatesGermanyFrance+7#cve#cve-2026-2459#cwe-267