Total
1274 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-32747 | 1 Dell | 3 Powerflex Appliance Intelligent Catalog, Powerflex Manager, Powerflex Rack | 2026-10-05 | N/A | 5.3 MEDIUM |
| Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2025-59134 | 2026-10-05 | N/A | 8.8 HIGH | ||
| Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through <= 1.5.8. | |||||
| CVE-2026-102846 | 2026-10-02 | 5.8 MEDIUM | 4.7 MEDIUM | ||
| A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument tipe/title/content_setting results in improper authorization. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet. | |||||
| CVE-2026-102293 | 2026-10-02 | 7.5 HIGH | 7.3 HIGH | ||
| A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.add of the file ApiMaApplication.java of the component api-admin Backend. The manipulation of the argument isAdmin/jobId leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. | |||||
| CVE-2026-103494 | 1 Jetbrains | 1 Youtrack | 2026-10-02 | N/A | 6.6 MEDIUM |
| In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | |||||
| CVE-2024-58273 | 1 Nagios | 1 Log Server | 2026-10-02 | N/A | 7.8 HIGH |
| Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user (or the backend shell user) to escalate to root on the host. | |||||
| CVE-2024-14045 | 2026-10-01 | 6.5 MEDIUM | 6.3 MEDIUM | ||
| A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Upgrading to version 0.9.3 is able to resolve this issue. This patch is called f767ac1a5987d4865d9f158c6a967680f8e45468. It is suggested to upgrade the affected component. | |||||
| CVE-2026-103068 | 2026-10-01 | N/A | 8.8 HIGH | ||
| Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions. | |||||
| CVE-2026-103752 | 2026-10-01 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions. | |||||
| CVE-2026-103532 | 2026-10-01 | 5.0 MEDIUM | 5.3 MEDIUM | ||
| A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be initiated remotely. The reported GitHub issue was closed with the label "duplicate". | |||||
| CVE-2026-103286 | 2026-10-01 | N/A | 7.3 HIGH | ||
| Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks. | |||||
| CVE-2026-101054 | 2026-10-01 | 5.0 MEDIUM | 5.3 MEDIUM | ||
| A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_supplicant.conf of the component TCP Service. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. | |||||
| CVE-2025-10073 | 1 Portabilis | 1 I-educar | 2026-09-30 | 4.0 MEDIUM | 4.3 MEDIUM |
| A vulnerability was determined in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Api/turma. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. | |||||
| CVE-2026-103470 | 2026-09-30 | N/A | N/A | ||
| In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges. | |||||
| CVE-2026-72840 | 2026-09-30 | N/A | 8.8 HIGH | ||
| OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write, which the default busybox crond daemon executes as root within one minute. | |||||
| CVE-2026-100619 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Capgo (capgo.app) blocks direct user inserts into the public.manifest table with a RESTRICTIVE row-level security policy, but that restriction can be bypassed indirectly. A principal holding an app-scoped upload/write/all API key (upload+ rights) or an authenticated user with write+ rights on an app can update public.app_versions.manifest on a version whose storage_provider is 'r2-direct', which is not covered by the bundle content-lock check. The on_version_update async worker trusts record.manifest and, using the service-role Supabase client, inserts the attacker-controlled file_name, file_hash, and s3_path into public.manifest before clearing app_versions.manifest. When a channel points to the crafted version, the /updates endpoint returns the service-role-created manifest entry as a client-facing download_url, enabling OTA manifest poisoning through a trusted async worker path. All versions are affected; no patch was available at the time of publication. | |||||
| CVE-2026-97245 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions. | |||||
| CVE-2026-96821 | 2026-09-30 | N/A | 6.3 MEDIUM | ||
| Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions. | |||||
| CVE-2026-96815 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Custom role Privilege Escalation in Vitepos <= 3.5.0 versions. | |||||
| CVE-2026-96350 | 2026-09-30 | N/A | 9.8 CRITICAL | ||
| Subscriber Privilege Escalation in Estatik <= 4.3.5 versions. | |||||