CWE-272 · Access Control
Least Privilege Violation
43CVEs
SortMost likely exploited
43 CVEs with CWE-272 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violationTOTOLINK · N600R · CVSS 7.2 · 2025-07-26 | 7.2 | 1.1% | 2025-07-26 |
| CVE-2026-15270D-link DIR-823G Web boa.conf least privilege violationD-link · DIR-823G · CVSS 7.5 · 2026-07-09 | 7.5 | 0.9% | 2026-07-09 |
| CVE-2025-59106Web Server Running with Root Privileges in dormakaba access managerdormakaba · Access Manager 92xx-k7 · CVSS 8.8 · 2026-01-26 | 8.8 | 0.8% | 2026-01-26 |
| CVE-2024-24830OpenObserve Privilege Escalation Vulnerability in Users APIopenobserve · openobserve · CVSS 10 · 2024-02-08 | 10.0 | 0.7% | 2024-02-08 |
| CVE-2026-15271TOTOLINK EX200 Web boa.conf least privilege violationTOTOLINK · A3000RU · CVSS 7.5 · 2026-07-09 | 7.5 | 0.7% | 2026-07-09 |
| CVE-2025-49144Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Pathnotepad-plus-plus · notepad-plus-plus · CVSS 7.3 · 2025-06-23 | 7.3 | 0.7% | 2025-06-23 |
| CVE-2024-0798Privilege Escalation in mintplex-labs/anything-llmmintplex-labs · mintplex-labs/anything-llm · CVSS 8.1 · 2024-02-25 | 8.1 | 0.6% | 2024-02-25 |
| CVE-2024-55954OpenObserve Improper Authorization Allows Admin User to Remove Root Useropenobserve · openobserve · CVSS 8.7 · 2025-01-16 | 8.7 | 0.5% | 2025-01-16 |
| CVE-2026-11492D-Link DIR-823G vsftpd vsftpd.conf least privilege violationD-Link · DIR-823G · CVSS 4.3 · 2026-06-08 | 4.3 | 0.5% | 2026-06-08 |
| CVE-2024-25106OpenObserve Unauthorized Access Vulnerability in Users APIopenobserve · openobserve · CVSS 9.1 · 2024-02-08 | 9.1 | 0.5% | 2024-02-08 |
| CVE-2025-7722Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalationsteverio · Social Streams · CVSS 8.8 · 2025-07-23 | 8.8 | 0.4% | 2025-07-23 |
| CVE-2026-11497D-Link DCS-5615 Boa Webserver boa.conf least privilege violationD-Link · DCS-5615 · CVSS 5.3 · 2026-06-08 | 5.3 | 0.4% | 2026-06-08 |
| CVE-2026-11555D-Link DGS-1100-08PD Web boa.conf least privilege violationD-Link · DGS-1100-08PD · CVSS 3.7 · 2026-06-08 | 3.7 | 0.4% | 2026-06-08 |
| CVE-2026-11620TOTOLINK EX200 vsftpd vsftpd.conf least privilege violationTOTOLINK · EX200 · CVSS 5.3 · 2026-06-09 | 5.3 | 0.3% | 2026-06-09 |
| CVE-2025-1384Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation ControllersOMRON Corporation · Machine Automation Controller NJ-series · CVSS 7 · 2025-07-13 | 7.0 | 0.3% | 2025-07-13 |
| CVE-2026-103504Gitea API team demotion not applied to unit permissionsGitea · Gitea · CVSS 8.1 · 2026-10-06 | 8.1 | 0.3% | 2026-10-06 |
| CVE-2026-39459iControl REST and tmsh vulnerabilityF5 · BIG-IP · CVSS 7.2 · 2026-05-13 | 7.2 | 0.3% | 2026-05-13 |
| CVE-2025-62299HCL IntelliOps Event Management is affected by multiple security vulnerabilities.HCL Software · IEM · CVSS 6.6 · 2026-08-20 | 6.6 | 0.3% | 2026-08-20 |
| CVE-2026-55226Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorstrimzi · strimzi-kafka-operator · CVSS 5.4 · 2026-09-15 | 5.4 | 0.3% | 2026-09-15 |
| CVE-2026-23634Pepr Overly Permissive RBAC ClusterRole in Admin Modedefenseunicorns · pepr · CVSS 0 · 2026-01-16 | 0.0 | 0.2% | 2026-01-16 |
| CVE-2024-35204Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users can conduct attacks.No vendor recorded · CVSS 8.4 · 2024-05-13 | 8.4 | 0.2% | 2024-05-13 |
| CVE-2024-27165Local Privilege EscalationToshiba Tec Corporation · Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.8 · 2024-06-14 | 7.8 | 0.2% | 2024-06-14 |
| CVE-2026-11494TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violationTOTOLINK · AC1200 T8 · CVSS 4.3 · 2026-06-08 | 4.3 | 0.2% | 2026-06-08 |
| CVE-2025-68267In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation tokenJetBrains · TeamCity · CVSS 6.5 · 2025-12-16 | 6.5 | 0.2% | 2025-12-16 |
| CVE-2026-11554TOTOLINK CP450 vsftpd vsftpd.conf least privilege violationTOTOLINK · CP450 · CVSS 4.3 · 2026-06-08 | 4.3 | 0.2% | 2026-06-08 |
| CVE-2025-8758TRENDnet TEW-822DRE vsftpd least privilege violationTRENDnet · TEW-822DRE · CVSS 7 · 2025-08-09 | 7.0 | 0.2% | 2025-08-09 |
| CVE-2024-0638Privilege escalation in mk_oracle pluginsCheckmk GmbH · Checkmk · CVSS 8.2 · 2024-03-22 | 8.2 | 0.2% | 2024-03-22 |
| CVE-2025-8757TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violationTRENDnet · TV-IP110WN · CVSS 7 · 2025-08-09 | 7.0 | 0.2% | 2025-08-09 |
| CVE-2024-28824Privilege escalation in mk_informix pluginCheckmk GmbH · Checkmk · CVSS 8.8 · 2024-03-22 | 8.8 | 0.2% | 2024-03-22 |
| CVE-2025-47809Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivilege…Wibu · CodeMeter · CVSS 8.2 · 2025-05-16 | 8.2 | 0.2% | 2025-05-16 |
| CVE-2024-28829Privilege escalation in mk_informix pluginCheckmk GmbH · Checkmk · CVSS 5.2 · 2024-08-20 | 5.2 | 0.2% | 2024-08-20 |
| CVE-2023-28047Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation. A local low privilege attacker could potentially e…Dell · Dell Display Manager · CVSS 7.3 · 2023-04-20 | 7.3 | 0.2% | 2023-04-20 |
| CVE-2023-32451Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during installation and uninstallationDell · Dell Display Manager · CVSS 7.3 · 2024-02-06 | 7.3 | 0.2% | 2024-02-06 |
| CVE-2023-28046Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially…Dell · Dell Display Manager · CVSS 6.6 · 2023-04-06 | 6.6 | 0.1% | 2023-04-06 |
| CVE-2025-9711Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2bBrocade · Fabric OS · CVSS 8.5 · 2026-02-03 | 8.5 | 0.1% | 2026-02-03 |
| CVE-2026-59915Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially…Dell · Alienware Command Center (AWCC) · CVSS 7.3 · 2026-08-18 | 7.3 | 0.1% | 2026-08-18 |
| CVE-2026-79944Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privilege…Dell · Secure Connect Gateway 5.0 - Application · CVSS 3.4 · 2026-09-09 | 3.4 | 0.1% | 2026-09-09 |
| CVE-2026-79693Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privilege…Dell · Secure Connect Gateway 5.0 - Application · CVSS 3.4 · 2026-09-09 | 3.4 | 0.1% | 2026-09-09 |
| CVE-2026-91894Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially…Dell · Alienware Command Center (AWCC) · CVSS 6.7 · 2026-11-02 | 6.7 | 0.1% | 2026-11-02 |
| CVE-2026-49500Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attack…Dell · Alienware Command Center (AWCC · CVSS 6 · 2026-08-18 | 6.0 | 0.1% | 2026-08-18 |
| CVE-2026-32655Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially…Dell · Alienware Command Center (AWCC) · CVSS 5.3 · 2026-04-27 | 5.3 | 0.1% | 2026-04-27 |
| CVE-2026-106589In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPort…OpenBSD · OpenSSH · CVSS 2.9 · 2026-10-06 | 2.9 | 0.1% | 2026-10-06 |
| CVE-2026-81452Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially…Dell · Alienware Command Center (AWCC) · CVSS 7 · 2026-10-16 | 7.0 | 0.1% | 2026-10-16 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.