CWE-266 · Access Control
Incorrect Privilege Assignment
1,273CVEs
1exploited
8with a public check
8likely (EPSS 10%+)
SortMost likely exploited
1,273 CVEs with CWE-266 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-48172In CISA KEVExploitedLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of gr…LiteSpeed Technologies · cPanel Plugin · CVSS 10 · 2026-05-21 | 10.0 | 18% | 2026-05-21 |
| CVE-2024-28000CheckWordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to AdminLiteSpeed Technologies · LiteSpeed Cache · CVSS 9.8 · 2024-08-21 | 9.8 | 68% | 2024-08-21 |
| CVE-2025-27007CheckOttoKit < 1.0.83 - SureTriggers allows Privilege EscalationBrainstorm Force · OttoKit · CVSS 9.8 · 2025-05-01 | 9.8 | 54% | 2025-05-01 |
| CVE-2025-47539CheckEventin <= 4.0.26 - Privilege EscalationArraytics · Eventin · CVSS 9.8 · 2025-05-23 | 9.8 | 25% | 2025-05-23 |
| CVE-2026-23550CheckModular DS - Broken Access ControlModular DS · Modular DS · CVSS 10 · 2026-01-14 | 10.0 | 21% | 2026-01-14 |
| CVE-2024-24882CheckMasteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalationmasteriyo · Masteriyo - LMS · CVSS 9.8 · 2024-05-17 | 9.8 | 2.1% | 2024-05-17 |
| CVE-2026-49060CheckHippoo Mobile App for WooCommerce - Broken Access ControlHippoo · Hippoo Mobile App for WooCommerce · CVSS 9.8 · 2026-06-11 | 9.8 | 1.8% | 2026-06-11 |
| CVE-2026-27542CheckWooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege EscalationRymera Web Co Pty Ltd. · Woocommerce Wholesale Lead Capture · CVSS 9.8 · 2026-03-19 | 9.8 | 1.8% | 2026-03-19 |
| CVE-2026-110372CheckWordPress OttoKit Plugin <= 1.1.40 - Unauthenticated Privilege Escalation via connection-denied TokenBrainstorm Force · OttoKit · CVSS 9.8 · 2026-10-18 | 9.8 | 1.4% | 2026-10-18 |
| CVE-2022-20759Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 8.8 · 2022-05-03 | 8.8 | 29% | 2022-05-03 |
| CVE-2024-13106D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access controlD-Link · DIR-816 A2 · CVSS 5.3 · 2025-01-02 | 5.3 | 26% | 2025-01-02 |
| CVE-2024-3013Teledyne FLIR AX8 User Registration test_login.php improper authorizationTeledyne FLIR · AX8 · CVSS 6.3 · 2024-03-28 | 6.3 | 23% | 2024-03-28 |
| CVE-2025-41115Incorrect privilege assignmentGrafana · Grafana Enterprise · CVSS 10 · 2025-11-21 | 10.0 | 17% | 2025-11-21 |
| CVE-2025-2359D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorizationD-Link · DIR-823G · CVSS 7.3 · 2025-03-17 | 7.3 | 15% | 2025-03-17 |
| CVE-2025-3663TOTOLINK A3700R Password cstecgi.cgi setWiFiEasyGuestCfg access controlTOTOLINK · A3700R · CVSS 5.3 · 2025-04-16 | 5.3 | 11% | 2025-04-16 |
| CVE-2025-2993Tenda FH1202 default.cfg access controlTenda · FH1202 · CVSS 5.3 · 2025-03-31 | 5.3 | 11% | 2025-03-31 |
| CVE-2025-2546D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access controlD-Link · DIR-618 · CVSS 4.3 · 2025-03-20 | 4.3 | 11% | 2025-03-20 |
| CVE-2024-8253Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalationpickplugins · Post Grid and Gutenberg Blocks · CVSS 8.8 · 2024-09-11 | 8.8 | 9.4% | 2024-09-11 |
| CVE-2025-49388WordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerabilitykamleshyadav · Miraculous Core Plugin · CVSS 9.8 · 2025-08-28 | 9.8 | 6.6% | 2025-08-28 |
| CVE-2026-4194D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access controlD-Link · DNS-120 · CVSS 7.3 · 2026-03-15 | 7.3 | 5.6% | 2026-03-15 |
| CVE-2018-1088A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and esc…Red Hat, Inc. · glusterfs · 2018-04-18 | – | 5.5% | 2018-04-18 |
| CVE-2025-3980wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System list improper authorizationwowjoy 浙江湖州华卓信息科技有限公司 · Internet Doctor Workstation System · CVSS 4.3 · 2025-04-27 | 4.3 | 5.5% | 2025-04-27 |
| CVE-2014-2532sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by usin…Openbsd · Openssh · CVSS 4.2 · 2014-03-18 | 4.2 | 4.8% | 2014-03-18 |
| CVE-2025-2360D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorizationD-Link · DIR-823G · CVSS 7.3 · 2025-03-17 | 7.3 | 4.2% | 2025-03-17 |
| CVE-2025-10644Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass VulnerabilityWondershare · Repairit · CVSS 9.4 · 2025-09-17 | 9.4 | 3.1% | 2025-09-17 |
| CVE-2023-1874WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalationpeterschulznl · WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards · CVSS 7.5 · 2023-04-12 | 7.5 | 2.7% | 2023-04-12 |
| CVE-2024-13030D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access controlD-Link · DIR-823G · CVSS 7.3 · 2024-12-30 | 7.3 | 2.0% | 2024-12-30 |
| CVE-2018-1101Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are memb…Red Hat, Inc. · Ansible Tower · 2018-05-02 | – | 1.9% | 2018-05-02 |
| CVE-2024-54363WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerabilitysaiful.total · Wp NssUser Register · CVSS 9.8 · 2024-12-16 | 9.8 | 1.9% | 2024-12-16 |
| CVE-2020-7009Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to gen…Elastic · Elasticsearch · 2020-03-31 | – | 1.9% | 2020-03-31 |
| CVE-2020-7014The fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to c…Elastic · Elasticsearch · 2020-06-03 | – | 1.7% | 2020-06-03 |
| CVE-2024-27460A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.HP Inc. · Plantronics Hub · CVSS 6.7 · 2024-05-10 | 6.7 | 1.7% | 2024-05-10 |
| CVE-2026-4180D-Link DIR-816 goahead redirect.asp access controlD-Link · DIR-816 · CVSS 7.3 · 2026-03-15 | 7.3 | 1.6% | 2026-03-15 |
| CVE-2020-14318A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which…Samba · samba · CVSS 4.3 · 2020-12-03 | 4.3 | 1.5% | 2020-12-03 |
| CVE-2021-1303Cisco DNA Center Privilege Escalation VulnerabilityCisco · Cisco Digital Network Architecture Center (DNA Center) · CVSS 4.3 · 2021-01-20 | 4.3 | 1.4% | 2021-01-20 |
| CVE-2025-3668TOTOLINK A3700R cstecgi.cgi setScheduleCfg access controlTOTOLINK · A3700R · CVSS 5.3 · 2025-04-16 | 5.3 | 1.4% | 2025-04-16 |
| CVE-2021-1594Cisco Identity Services Engine Privilege Escalation VulnerabilityCisco · Cisco Identity Services Engine Software · CVSS 7.5 · 2021-10-06 | 7.5 | 1.4% | 2021-10-06 |
| CVE-2022-2626Incorrect Privilege Assignment in hestiacp/hestiacphestiacp · hestiacp/hestiacp · CVSS 9.1 · 2022-08-05 | 9.1 | 1.3% | 2022-08-05 |
| CVE-2012-4549Jboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorizationRed Hat · Red Hat JBoss Enterprise Application Platform 6.0 · CVSS 6.5 · 2013-01-05 | 6.5 | 1.3% | 2013-01-05 |
| CVE-2025-2553D-Link DIR-618/DIR-605L formVirtualServ access controlD-Link · DIR-618 · CVSS 4.3 · 2025-03-20 | 4.3 | 1.3% | 2025-03-20 |
| CVE-2019-10940A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privi…Siemens AG · SINEMA Server · 2020-01-16 | – | 1.2% | 2020-01-16 |
| CVE-2024-40433Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component.Tencent · Wechat · CVSS 8.8 · 2024-07-26 | 8.8 | 1.2% | 2024-07-26 |
| CVE-2024-54383WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerabilitywpweb · WooCommerce PDF Vouchers · CVSS 9.8 · 2024-12-18 | 9.8 | 1.2% | 2024-12-18 |
| CVE-2024-13107D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access controlD-Link · DIR-816 A2 · CVSS 5.3 · 2025-01-02 | 5.3 | 1.1% | 2025-01-02 |
| CVE-2024-22145WordPress InstaWP Connect plugin <= 0.1.0.8 - Arbitrary Option Update to Privilege Escalation vulnerabilityInstaWP · InstaWP Connect · CVSS 8.8 · 2024-05-17 | 8.8 | 1.1% | 2024-05-17 |
| CVE-2020-7018Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the a…Elastic · Elastic Enterprise Search · 2020-08-18 | – | 1.1% | 2020-08-18 |
| CVE-2019-14819A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the…[Red Hat] · openshift-ansible · CVSS 7.5 · 2020-01-07 | 7.5 | 1.1% | 2020-01-07 |
| CVE-2022-1225Incorrect Privilege Assignment in phpipam/phpipamphpipam · phpipam/phpipam · CVSS 6.5 · 2022-04-04 | 6.5 | 1.0% | 2022-04-04 |
| CVE-2026-5311D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access controlD-Link · DNS-120 · CVSS 5.3 · 2026-04-01 | 5.3 | 1.0% | 2026-04-01 |
| CVE-2021-47241ethtool: strset: fix message length calculationLinux · Linux · CVSS 7.5 · 2024-05-21 | 7.5 | 1.0% | 2024-05-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.