The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including,...

CVE-2026-13228

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Esca

历史摘要 · 未重新核验 · NVD

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via update_capabilities REST Endpoint in all versions up to, and including, 5.0.4. This is due to the `...

CVE-2026-12224

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via update_capabilities REST Endpoint in all ve

历史摘要 · 未重新核验 · NVD

phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController:...

CVE-2026-57995

phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GR

历史摘要 · 未重新核验 · GitHub Advisory

phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GROUP_EDIT administrators to grant arbitrary rights to grou...

CVE-2026-57995

phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GR

历史摘要 · 未重新核验 · NVD

Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a mal...

CVE-2026-14124

Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a local at

历史摘要 · 未重新核验 · NVD

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

CVE-2026-50566

### Summary A follow-up bypass of the round-4 PodSpec hardening (GHSA-gx55-f84r-v3r7, GHSA-wmgg-3p4h-48x7, GHSA-v455-mv

历史摘要 · 未重新核验 · GitHub Advisory

Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container

CVE-2026-50565

### Summary Fission builder pods were created with `ServiceAccountName: fission-builder` and no `AutomountServiceAccoun

历史摘要 · 未重新核验 · GitHub Advisory

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

CVE-2026-50564

### Summary Fission's `Environment` CRD exposes `spec.runtime.podSpec` and `spec.builder.podSpec`, which are merged int

历史摘要 · 未重新核验 · GitHub Advisory

Fission Container Executor Function PodSpec Injection Leading to Node Escape

CVE-2026-50563

### Summary Fission's Container Executor path lets a tenant supply `Function.spec.podspec` directly; the executor merge

历史摘要 · 未重新核验 · GitHub Advisory

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

CVE-2026-50545

### Summary A stronger framing of the same root cause as GHSA-gx55-f84r-v3r7: the `Environment.spec.runtime.podSpec` /

历史摘要 · 未重新核验 · GitHub Advisory

Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec

### Summary The Fission MessageQueueTrigger (MQT) scaler controller exposed two privilege-escalation primitives to any

历史摘要 · 未重新核验 · GitHub Advisory

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root ...

CVE-2025-7406

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administr

历史摘要 · 未重新核验 · NVD

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container...

CVE-2026-58053

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docke

历史摘要 · 未重新核验 · GitHub Advisory

MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when...

CVE-2026-58054

MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing use

历史摘要 · 未重新核验 · GitHub Advisory

MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing users; the user module offers the Administrators group (gid ...

CVE-2026-58054

MyBB 1.8.40 版本中存在一个权限提升漏洞（CVE-2026-58054）。问题源于用户管理模块对有限管理员控制面板用户未进行充分的权限检查：当拥有委托用户管理权限的管理员创建或编辑用户时，系统提供的用户组选择列表中包含“管理员组”

历史摘要 · 未重新核验 · NVD

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with pr...

CVE-2026-58053

Gitea act_runner 的 Docker 后端（通过 act 0.262.0 及更早版本）在处理工作流时，会将容器配置中的 container.options 字符串直接传递给 Docker 作业容器的 HostConfig。即使

历史摘要 · 未重新核验 · NVD

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing...

CVE-2026-12415

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on th

历史摘要 · 未重新核验 · GitHub Advisory

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions u...

CVE-2026-12415

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on th

历史摘要 · 未重新核验 · NVD

When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation was permitted but did not check the result before delive...

CVE-2026-45256

When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation

历史摘要 · 未重新核验 · NVD

Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1/repos/:owner/:repo/issue-tracker, PATCH /api/v1/repos/:owner/:repo/wiki, and...

CVE-2026-52808

Gogs is an open source self-hosted Git service. Prior to 0.14.3, three API endpoints — PATCH /api/v1/repos/:owner/:repo/

历史摘要 · 未重新核验 · NVD