CWE-842 · Access Control
Placement of User into Incorrect Group
10CVEs
SortMost likely exploited
10 CVEs with CWE-842 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-31007Privilege escalation from administrator in eLabFTWelabftw · elabftw · CVSS 4.9 · 2022-05-31 | 4.9 | 27% | 2022-05-31 |
| CVE-2023-25575Secured properties in API Platform Core may be accessible within collectionsapi-platform · core · CVSS 7.7 · 2023-02-28 | 7.7 | 0.6% | 2023-02-28 |
| CVE-2022-45097Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network attacker could potentially exploit this vulnerability, leading…Dell · PowerScale OneFS · CVSS 6.3 · 2023-02-01 | 6.3 | 0.4% | 2023-02-01 |
| CVE-2024-9412Improper Authorization Vulnerability in Rockwell Automation Verve® Asset ManagerRockwell Automation · Verve® Asset Manager · CVSS 8.4 · 2024-10-08 | 8.4 | 0.4% | 2024-10-08 |
| CVE-2026-73439Security Advisory 0164Arista Networks · EOS · CVSS 7.5 · 2026-09-16 | 7.5 | 0.4% | 2026-09-16 |
| CVE-2022-2990An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker h…Buildah Project · buildah · 2022-09-13 | – | 0.4% | 2022-09-13 |
| CVE-2022-3650A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged informati…Redhat · Ceph · 2023-01-17 | – | 0.3% | 2023-01-17 |
| CVE-2022-2989An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker ha…Podman Project · podman · CVSS 7.1 · 2022-09-13 | 7.1 | 0.3% | 2022-09-13 |
| CVE-2026-102585Moodle: group validation missing when enrolling user to courseMoodle · Moodle · CVSS 4.3 · 2026-09-30 | 4.3 | 0.2% | 2026-09-30 |
| CVE-2026-6970authd Denial of Service and Local Privilege EscalationCanonical · authd · CVSS 7.3 · 2026-04-27 | 7.3 | 0.1% | 2026-04-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.