CWE-266: Incorrect Privilege Assignment — known CVE vulnerabilities

CVEs classified under CWE-266 (Incorrect Privilege Assignment), ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (50)

• CVE-2026-39773 — CVSS 10.0 (critical): Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
• CVE-2026-105284 — CVSS 10.0 (critical): A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file…
• CVE-2026-23800 — CVSS 10.0 (critical): Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS…
• CVE-2025-41115 — CVSS 10.0 (critical): SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in…
• CVE-2024-9479: Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue…
• CVE-2024-9478: Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue…
• CVE-2026-42368 — CVSS 9.9 (critical): A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted HTTP…
• CVE-2026-32922 — CVSS 9.9 (critical): OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing…
• CVE-2026-22907 — CVSS 9.9 (critical): An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.
• CVE-2025-62645 — CVSS 9.9 (critical): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token…
• CVE-2025-10725 — CVSS 9.9 (critical): A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data…
• CVE-2025-54049 — CVSS 9.9 (critical): Incorrect Privilege Assignment vulnerability in miniOrange Custom API for WP custom-api-for-wp allows Privilege Escalation.This issue…
• CVE-2025-26512 — CVSS 9.9 (critical): SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user…
• CVE-2026-39761 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
• CVE-2026-39753 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
• CVE-2026-103752 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.
• CVE-2026-96350 — CVSS 9.8 (critical): Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
• CVE-2026-78330 — CVSS 9.8 (critical): Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are…
• CVE-2026-84814 — CVSS 9.8 (critical): Subscriber Privilege Escalation in Bricksforge <= 3.1.8.8 versions.
• CVE-2026-81294 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
• CVE-2026-32566 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
• CVE-2026-78267 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
• CVE-2026-66648 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
• CVE-2026-32558 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
• CVE-2026-28165 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
• CVE-2026-66682 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.
• CVE-2025-15689 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.
• CVE-2026-73390 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
• CVE-2026-73347 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
• CVE-2026-72839 — CVSS 9.8 (critical): filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir…
• CVE-2026-66424 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
• CVE-2026-66662 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
• CVE-2026-65507 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
• CVE-2026-61951 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.
• CVE-2026-59540 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.
• CVE-2026-57813 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects…
• CVE-2026-57692 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from…
• CVE-2026-56033 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.
• CVE-2026-56030 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.
• CVE-2026-56028 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions.
• CVE-2026-54807 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions.
• CVE-2026-49058 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.
• CVE-2026-27395 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.
• CVE-2025-69179 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.
• CVE-2026-39583 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.
• CVE-2026-34901 — CVSS 9.8 (critical): Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions.
• CVE-2026-49060 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo…
• CVE-2025-53209 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation. This issue affects Masteriyo LMS…
• CVE-2026-48879 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in Sergey AIWU allows Privilege Escalation. This issue affects AIWU: from n/a through 1.4.17.
• CVE-2026-42680 — CVSS 9.8 (critical): Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege…