90 CVEs — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-120338 | Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno | CRITICAL | 10.0 | 56%ile | NVD | 2026-11-01 |
| CVE-2026-120306 | Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on t | CRITICAL | 9.9 | 30%ile | NVD | 2026-11-01 |
| CVE-2026-77524 | KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication | CRITICAL | 9.9 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-7374 | Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability | CRITICAL | 9.9 | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-113616 | The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved accou | CRITICAL | 9.8 | 28%ile | NVD | 2026-10-29 |
| CVE-2026-116386 | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions. | CRITICAL | 9.8 | 29%ile | NVD | 2026-10-30 |
| CVE-2026-61850 | Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authori | CRITICAL | 9.3 | 30%ile | NVD | 2026-10-30 |
| CVE-2026-114612 | LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key | HIGH | 9.9 | 25%ile | GitHub | 2026-10-27 |
| CVE-2026-113947 | This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a m | HIGH | 8.8 | 44%ile | NVD | 2026-10-26 |
| CVE-2026-75891 | The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and | HIGH | 8.8 | 23%ile | NVD | 2026-10-27 |
| CVE-2026-65220 | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate | HIGH | 8.8 | 17%ile | NVD | 2026-10-27 |
| CVE-2026-118008 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | HIGH | 8.8 | 29%ile | NVD | 2026-10-27 |
| CVE-2026-58255 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrat | HIGH | 8.8 | 36%ile | NVD | 2026-10-27 |
| CVE-2026-56828 | Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain aut | HIGH | 8.8 | 38%ile | NVD | 2026-10-28 |
| CVE-2026-118082 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. | HIGH | 8.8 | 30%ile | NVD | 2026-10-29 |
| CVE-2026-119168 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration th | HIGH | 8.8 | 3%ile | NVD | 2026-10-29 |
| CVE-2026-104368 | The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up | HIGH | 8.8 | 28%ile | NVD | 2026-10-30 |
| CVE-2026-59387 | The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ en | HIGH | 8.8 | 14%ile | NVD | 2026-10-30 |
| CVE-2026-105894 | The Ak Framework plugin for WordPress, included in the Newsy - Viral News & Magazine WordPress Theme, is vulnerable to P | HIGH | 8.8 | 25%ile | NVD | 2026-10-30 |
| CVE-2026-118086 | Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. | HIGH | 8.8 | 30%ile | NVD | 2026-10-30 |
| CVE-2026-63339 | IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica | HIGH | 8.8 | 19%ile | NVD | 2026-10-30 |
| CVE-2026-104012 | The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Es | HIGH | 8.8 | 21%ile | NVD | 2026-10-31 |
| CVE-2026-120070 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post | HIGH | 8.8 | 23%ile | NVD | 2026-10-31 |
| CVE-2026-62990 | Shopper is a Headless e-commerce Admin Panel. In versions from 2.0.0 prior to 2.10.1 and in the 3.0.0 prereleases beta.1 | HIGH | 8.7 | 16%ile | NVD | 2026-10-30 |
| CVE-2026-117466 | In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full s | HIGH | 8.6 | 14%ile | NVD | 2026-10-27 |
| CVE-2026-112357 | GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local pri | HIGH | 8.5 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-62847 | Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026. | HIGH | 8.2 | 4%ile | NVD | 2026-10-30 |
| CVE-2026-63182 | LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate suppo | HIGH | 8.1 | 4%ile | NVD | 2026-10-30 |
| CVE-2026-54330 | Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation | HIGH | 8.1 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-117681 | A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatical | HIGH | 8.0 | 1%ile | NVD | 2026-10-31 |
| CVE-2026-92374 | A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged help | HIGH | 7.8 | 0%ile | NVD | 2026-10-27 |
| CVE-2026-92376 | Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring fo | HIGH | 7.8 | 3%ile | NVD | 2026-10-27 |
| CVE-2026-108304 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | HIGH | 7.8 | 2%ile | NVD | 2026-10-27 |
| CVE-2026-108305 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | HIGH | 7.8 | 3%ile | NVD | 2026-10-27 |
| CVE-2026-108306 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | HIGH | 7.8 | 3%ile | NVD | 2026-10-27 |
| CVE-2026-118602 | Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows | HIGH | 7.8 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-101213 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low priv | HIGH | 7.8 | 3%ile | NVD | 2026-10-30 |
| CVE-2026-92886 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privi | HIGH | 7.8 | — | NVD | 2026-11-02 |
| CVE-2026-76642 | util-linux libmount Privilege Escalation via Failed Mount Helper | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-72693 | Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login | HIGH | 7.8 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-12505 | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| ionstack-2026 | IonStack Part 2: Linux kernel io_uring privilege escalation exploit chain | HIGH | 7.8 | — | Featured | 2026-07-07 |
| CVE-2026-120040 | The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a | HIGH | 7.5 | 21%ile | NVD | 2026-10-31 |
| CVE-2026-118205 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privile | HIGH | 7.4 | 41%ile | NVD | 2026-10-30 |
| CVE-2026-111582 | A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10. | HIGH | 7.3 | 1%ile | NVD | 2026-10-27 |
| CVE-2026-111583 | Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.8 | HIGH | 7.3 | 9%ile | NVD | 2026-10-27 |
| CVE-2026-111584 | A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to ver | HIGH | 7.3 | 1%ile | NVD | 2026-10-27 |
| CVE-2026-105477 | A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a | HIGH | 7.3 | 3%ile | NVD | 2026-10-27 |
| CVE-2026-78402 | Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf | HIGH | 7.3 | 4%ile | NVD | 2026-10-30 |
| CVE-2024-25621 | containerd affected by a local privilege escalation via wide permissions on CRI directory | HIGH | 7.3 | 6%ile | Microsoft | 2025-11-11 |
| CVE-2026-12080 | Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys | HIGH | 7.3 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-111577 | The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configu | HIGH | 7.2 | 27%ile | NVD | 2026-10-28 |
| CVE-2026-109381 | The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 T | HIGH | 7.2 | 37%ile | NVD | 2026-10-28 |
| CVE-2026-86393 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | HIGH | 7.2 | 27%ile | NVD | 2026-10-28 |
| CVE-2026-88810 | A privilege escalation issue was discovered in Rancher Manager's role-based access control. The inheritedNamespacedRules | HIGH | 7.2 | — | NVD | 2026-11-02 |
| CVE-2025-30414 | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cl | HIGH | 7.1 | 12%ile | NVD | 2026-10-28 |
| CVE-2026-54369 | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-54371 | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| GHSA-3w55-933p-8pv5 | Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage | HIGH | 7.1 | — | GitHub | 2026-10-27 |
| CVE-2026-53612 | util-linux mount hook_owner TOCTOU allows local privilege escalation | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-53613 | util-linux mount target TOCTOU allows local privilege escalation | HIGH | 7.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-105773 | Canimaan Software ClamXAV local privilege escalation | HIGH | 7.0 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2025-3770 | SMM IDT Privilege Escalation Vulnerability | HIGH | 7.0 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2026-104935 | Ivanti Connect Secure authentication bypass — exploited zero-day chained to root RCE | HIGH | — | 100%ile | Featured | 2026-10-13 |
| CVE-2026-115706 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escal | MEDIUM | 6.8 | 16%ile | NVD | 2026-10-29 |
| CVE-2026-90729 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 6.7 | 12%ile | NVD | 2026-10-27 |
| CVE-2026-117468 | Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a | MEDIUM | 6.5 | 40%ile | NVD | 2026-10-27 |
| CVE-2026-59386 | A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper p | MEDIUM | 6.5 | 13%ile | NVD | 2026-10-30 |
| CVE-2026-119980 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab | MEDIUM | 6.5 | 18%ile | NVD | 2026-10-31 |
| CVE-2026-115707 | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (E | MEDIUM | 6.4 | 2%ile | NVD | 2026-10-29 |
| CVE-2026-90728 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 6.3 | 1%ile | NVD | 2026-10-27 |
| CVE-2026-76780 | The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is | MEDIUM | 6.3 | 11%ile | NVD | 2026-10-28 |
| CVE-2026-54854 | Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions. | MEDIUM | 6.3 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-116806 | OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allow | MEDIUM | 5.3 | 15%ile | NVD | 2026-10-27 |
| CVE-2026-77172 | App passwords were allowed to bypass password confirmation on sensitive endpoints. | MEDIUM | 5.3 | 22%ile | NVD | 2026-10-27 |
| CVE-2026-119599 | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-le | MEDIUM | 5.3 | 35%ile | NVD | 2026-10-30 |
| CVE-2026-120185 | A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the fi | MEDIUM | 5.1 | 13%ile | NVD | 2026-10-31 |
| CVE-2024-9517 | The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. This | MEDIUM | 4.9 | — | NVD | 2026-11-02 |
| CVE-2025-64394 | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installa | MEDIUM | 4.3 | 1%ile | NVD | 2026-10-27 |
| CVE-2026-110808 | The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assig | MEDIUM | 4.2 | 14%ile | NVD | 2026-10-31 |
| CVE-2026-116471 | A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file | LOW | 2.1 | 10%ile | NVD | 2026-10-26 |
| CVE-2026-117862 | Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in F | UNKNOWN | — | 8%ile | NVD | 2026-10-27 |
| CVE-2026-117866 | Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox | UNKNOWN | — | 8%ile | NVD | 2026-10-27 |
| CVE-2026-117892 | Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox | UNKNOWN | — | 8%ile | NVD | 2026-10-27 |
| CVE-2026-117981 | Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbi | UNKNOWN | — | 8%ile | NVD | 2026-10-27 |
| CVE-2026-117995 | Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Fire | UNKNOWN | — | 8%ile | NVD | 2026-10-27 |
| CVE-2026-118006 | Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 1 | UNKNOWN | — | 4%ile | NVD | 2026-10-27 |
| CVE-2026-114524 | Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue | UNKNOWN | — | 4%ile | NVD | 2026-10-30 |
| CVE-2026-110535 | Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to conf | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |