共收录 809 条相关情报。
← 返回所有主题CVE-2026-92619
The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11
CVE-2026-81810
The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of
CVE-2026-75837
## Summary The core Flex group blueprint `system/blueprints/user/group.yaml` (access field, lines 48-55) omits the `secu
CVE-2026-81445
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerabilit
CVE-2026-92958
vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard toge
CVE-2026-92957
vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny)
CVE-2026-81442
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerabilit
CVE-2026-88904
The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on one of its REST routes, which tests the
CVE-2026-85128
The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration
CVE-2026-20287
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE
CVE-2026-12793
The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versi
CVE-2026-76694
A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways.
CVE-2026-79411
Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated ba
CVE-2026-0179
In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalat
CVE-2026-55226
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I
CVE-2026-55225
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I
CVE-2026-65831
ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/{database} with lang
CVE-2026-61549
Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backend/kubernetes/backend_options.go defines backend_op
CVE-2026-54168
Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8
CVE-2026-92073
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.