Common Weakness Enumeration

CWE-266

Allowed

Incorrect Privilege Assignment

Abstraction: Base · Status: Draft

API response cwe.mitre.org

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

2402 vulnerabilities reference this CWE, most recent first.

CVE-2026-112045 (GCVE-0-2026-112045)

Vulnerability from cvelistv5 – Published: 2026-10-19 03:00 – Updated: 2026-10-19 17:41
VLAI
Title
donetick History Deletion model.go CanDeleteHistory improper authorization
Summary
A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The project maintainer explains: "The concerns about "IDOR" framing seem to be overstated in my opinion (...), as Circle members are already trusted collaborators. We will address this issue. However, since the impact is limited to trusted members within the same circle, I would classify this as a bug rather than a security vulnerability."
Severity
5.3 (Medium)
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C
5.4 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C
SSVC
Exploitation: poc Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 17:41 UTC
CWE
  • CWE-285 - Improper Authorization
  • CWE-266 - Incorrect Privilege Assignment
Assigner
VulDB CNA under the mitre root
CNA scorecard B 82/100 over 3913 records in the last 180 days details
References
Impacted products
Vendor Product Version
n/a donetick Affected: 0.1.0
Affected: 0.1.1
Affected: 0.1.2
Affected: 0.1.3
Affected: 0.1.4
Affected: 0.1.5
Affected: 0.1.6
Affected: 0.1.7
Affected: 0.1.8
Affected: 0.1.9
Affected: 0.1.10
Affected: 0.1.11
Affected: 0.1.12
Affected: 0.1.13
Affected: 0.1.14
Affected: 0.1.15
Affected: 0.1.16
Affected: 0.1.17
Affected: 0.1.18
Affected: 0.1.19
Affected: 0.1.20
Affected: 0.1.21
Affected: 0.1.22
Affected: 0.1.23
Affected: 0.1.24
Affected: 0.1.25
Affected: 0.1.26
Affected: 0.1.27
Affected: 0.1.28
Affected: 0.1.29
Affected: 0.1.30
Affected: 0.1.31
Affected: 0.1.32
Affected: 0.1.33
Affected: 0.1.34
Affected: 0.1.35
Affected: 0.1.36
Affected: 0.1.37
Affected: 0.1.38
Affected: 0.1.39
Affected: 0.1.40
Affected: 0.1.41
Affected: 0.1.42
Affected: 0.1.43
Affected: 0.1.44
Affected: 0.1.45
Affected: 0.1.46
Affected: 0.1.47
Affected: 0.1.48
Affected: 0.1.49
Affected: 0.1.50
Affected: 0.1.51
Affected: 0.1.52
Affected: 0.1.53
Affected: 0.1.54
Affected: 0.1.55
Affected: 0.1.56
Affected: 0.1.57
Affected: 0.1.58
Affected: 0.1.59
Affected: 0.1.60
Affected: 0.1.61
Affected: 0.1.62
Affected: 0.1.63
Affected: 0.1.64
Affected: 0.1.65
Affected: 0.1.66
Affected: 0.1.67
Affected: 0.1.68
Affected: 0.1.69
Affected: 0.1.70
Affected: 0.1.71
Affected: 0.1.72
Affected: 0.1.73
Affected: 0.1.74
Affected: 0.1.75
Affected: 0.1.76
Affected: 0.1.77
Affected: 0.1.78
Affected: 0.1.79
Affected: 0.1.80
Affected: 0.1.81
Affected: 0.1.82
    cpe:2.3:a:donetick:donetick:*:*:*:*:*:*:*:*
Credits
geochen (VulDB User) VulDB CNA Team
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-112045",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T17:41:03.947391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T17:41:32.177Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:donetick:donetick:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "History Deletion Handler"
          ],
          "product": "donetick",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "0.1.0"
            },
            {
              "status": "affected",
              "version": "0.1.1"
            },
            {
              "status": "affected",
              "version": "0.1.2"
            },
            {
              "status": "affected",
              "version": "0.1.3"
            },
            {
              "status": "affected",
              "version": "0.1.4"
            },
            {
              "status": "affected",
              "version": "0.1.5"
            },
            {
              "status": "affected",
              "version": "0.1.6"
            },
            {
              "status": "affected",
              "version": "0.1.7"
            },
            {
              "status": "affected",
              "version": "0.1.8"
            },
            {
              "status": "affected",
              "version": "0.1.9"
            },
            {
              "status": "affected",
              "version": "0.1.10"
            },
            {
              "status": "affected",
              "version": "0.1.11"
            },
            {
              "status": "affected",
              "version": "0.1.12"
            },
            {
              "status": "affected",
              "version": "0.1.13"
            },
            {
              "status": "affected",
              "version": "0.1.14"
            },
            {
              "status": "affected",
              "version": "0.1.15"
            },
            {
              "status": "affected",
              "version": "0.1.16"
            },
            {
              "status": "affected",
              "version": "0.1.17"
            },
            {
              "status": "affected",
              "version": "0.1.18"
            },
            {
              "status": "affected",
              "version": "0.1.19"
            },
            {
              "status": "affected",
              "version": "0.1.20"
            },
            {
              "status": "affected",
              "version": "0.1.21"
            },
            {
              "status": "affected",
              "version": "0.1.22"
            },
            {
              "status": "affected",
              "version": "0.1.23"
            },
            {
              "status": "affected",
              "version": "0.1.24"
            },
            {
              "status": "affected",
              "version": "0.1.25"
            },
            {
              "status": "affected",
              "version": "0.1.26"
            },
            {
              "status": "affected",
              "version": "0.1.27"
            },
            {
              "status": "affected",
              "version": "0.1.28"
            },
            {
              "status": "affected",
              "version": "0.1.29"
            },
            {
              "status": "affected",
              "version": "0.1.30"
            },
            {
              "status": "affected",
              "version": "0.1.31"
            },
            {
              "status": "affected",
              "version": "0.1.32"
            },
            {
              "status": "affected",
              "version": "0.1.33"
            },
            {
              "status": "affected",
              "version": "0.1.34"
            },
            {
              "status": "affected",
              "version": "0.1.35"
            },
            {
              "status": "affected",
              "version": "0.1.36"
            },
            {
              "status": "affected",
              "version": "0.1.37"
            },
            {
              "status": "affected",
              "version": "0.1.38"
            },
            {
              "status": "affected",
              "version": "0.1.39"
            },
            {
              "status": "affected",
              "version": "0.1.40"
            },
            {
              "status": "affected",
              "version": "0.1.41"
            },
            {
              "status": "affected",
              "version": "0.1.42"
            },
            {
              "status": "affected",
              "version": "0.1.43"
            },
            {
              "status": "affected",
              "version": "0.1.44"
            },
            {
              "status": "affected",
              "version": "0.1.45"
            },
            {
              "status": "affected",
              "version": "0.1.46"
            },
            {
              "status": "affected",
              "version": "0.1.47"
            },
            {
              "status": "affected",
              "version": "0.1.48"
            },
            {
              "status": "affected",
              "version": "0.1.49"
            },
            {
              "status": "affected",
              "version": "0.1.50"
            },
            {
              "status": "affected",
              "version": "0.1.51"
            },
            {
              "status": "affected",
              "version": "0.1.52"
            },
            {
              "status": "affected",
              "version": "0.1.53"
            },
            {
              "status": "affected",
              "version": "0.1.54"
            },
            {
              "status": "affected",
              "version": "0.1.55"
            },
            {
              "status": "affected",
              "version": "0.1.56"
            },
            {
              "status": "affected",
              "version": "0.1.57"
            },
            {
              "status": "affected",
              "version": "0.1.58"
            },
            {
              "status": "affected",
              "version": "0.1.59"
            },
            {
              "status": "affected",
              "version": "0.1.60"
            },
            {
              "status": "affected",
              "version": "0.1.61"
            },
            {
              "status": "affected",
              "version": "0.1.62"
            },
            {
              "status": "affected",
              "version": "0.1.63"
            },
            {
              "status": "affected",
              "version": "0.1.64"
            },
            {
              "status": "affected",
              "version": "0.1.65"
            },
            {
              "status": "affected",
              "version": "0.1.66"
            },
            {
              "status": "affected",
              "version": "0.1.67"
            },
            {
              "status": "affected",
              "version": "0.1.68"
            },
            {
              "status": "affected",
              "version": "0.1.69"
            },
            {
              "status": "affected",
              "version": "0.1.70"
            },
            {
              "status": "affected",
              "version": "0.1.71"
            },
            {
              "status": "affected",
              "version": "0.1.72"
            },
            {
              "status": "affected",
              "version": "0.1.73"
            },
            {
              "status": "affected",
              "version": "0.1.74"
            },
            {
              "status": "affected",
              "version": "0.1.75"
            },
            {
              "status": "affected",
              "version": "0.1.76"
            },
            {
              "status": "affected",
              "version": "0.1.77"
            },
            {
              "status": "affected",
              "version": "0.1.78"
            },
            {
              "status": "affected",
              "version": "0.1.79"
            },
            {
              "status": "affected",
              "version": "0.1.80"
            },
            {
              "status": "affected",
              "version": "0.1.81"
            },
            {
              "status": "affected",
              "version": "0.1.82"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "geochen (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The project maintainer explains: \"The concerns about \"IDOR\" framing seem to be overstated in my opinion (...), as Circle members are already trusted collaborators. We will address this issue. However, since the impact is limited to trusted members within the same circle, I would classify this as a bug rather than a security vulnerability.\""
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5.5,
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T03:00:17.338Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-421693 | donetick History Deletion model.go CanDeleteHistory improper authorization",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/421693"
        },
        {
          "name": "VDB-421693 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/421693/cti"
        },
        {
          "name": "CVE-2026-112045 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-112045"
        },
        {
          "name": "Submit #1009027 | https://github.com/donetick/ donetick commit 0ca432c1f7731ef9c4c2f00aad7f2f845ef9c2b3 Improper Authorization",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1009027"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/donetick/donetick/issues/711"
        },
        {
          "tags": [
            "broken-link"
          ],
          "url": "https://github.com/donetick/donetick/security/advisories/GHSA-c545-2whr-g2v6"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/donetick/donetick/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-18T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-18T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-18T13:01:04.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "donetick History Deletion model.go CanDeleteHistory improper authorization",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-112045",
    "datePublished": "2026-10-19T03:00:17.338Z",
    "dateReserved": "2026-10-18T10:55:59.567Z",
    "dateUpdated": "2026-10-19T17:41:32.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-112025 (GCVE-0-2026-112025)

Vulnerability from cvelistv5 – Published: 2026-10-18 22:00 – Updated: 2026-10-19 17:54
VLAI
Title
light0011 cms Captcha Validation UserController.class.php access control
Summary
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/Home/Controller/UserController.class.php of the component Captcha Validation. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Severity
6.9 (Medium)
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C
7.3 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C
SSVC
Exploitation: poc Automatable: yes Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 17:54 UTC
CWE
  • CWE-284 - Improper Access Controls
  • CWE-266 - Incorrect Privilege Assignment
Assigner
VulDB CNA under the mitre root
CNA scorecard B 82/100 over 3913 records in the last 180 days details
References
Impacted products
Vendor Product Version
light0011 cms Affected: c774dce31c6df0055568a8d5c53d964d99be199d
Affected: f72cf46f601efb2a0618c3814cc2f61380b38930
    cpe:2.3:a:light0011:cms:*:*:*:*:*:*:*:*
Create a notification for this product.
Credits
gscsd (VulDB User) VulDB CNA Team
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-112025",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T17:54:11.204124Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T17:54:19.476Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:light0011:cms:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Captcha Validation"
          ],
          "product": "cms",
          "vendor": "light0011",
          "versions": [
            {
              "status": "affected",
              "version": "c774dce31c6df0055568a8d5c53d964d99be199d"
            },
            {
              "status": "affected",
              "version": "f72cf46f601efb2a0618c3814cc2f61380b38930"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "gscsd (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/Home/Controller/UserController.class.php of the component Captcha Validation. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "Improper Access Controls",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-18T22:00:14.621Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-421673 | light0011 cms Captcha Validation UserController.class.php access control",
          "tags": [
            "vdb-entry"
          ],
          "url": "https://vuldb.com/vuln/421673"
        },
        {
          "name": "VDB-421673 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/421673/cti"
        },
        {
          "name": "CVE-2026-112025 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-112025"
        },
        {
          "name": "Submit #1008050 | light0011 cms f72cf46f601efb2a0618c3814cc2f61380b38930 Client-Side Enforcement of Server-Side Security",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1008050"
        },
        {
          "tags": [
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/light0011/cms/issues/13"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/light0011/cms/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-18T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-18T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-18T09:42:45.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "light0011 cms Captcha Validation UserController.class.php access control",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-112025",
    "datePublished": "2026-10-18T22:00:14.621Z",
    "dateReserved": "2026-10-18T07:37:27.371Z",
    "dateUpdated": "2026-10-19T17:54:19.476Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-110898 (GCVE-0-2026-110898)

Vulnerability from cvelistv5 – Published: 2026-10-19 09:09 – Updated: 2026-10-19 16:50 X_Open Source
VLAI
Title
WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.
Severity
6.4 (Medium)
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 16:50 UTC
CWE
  • CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack CNA under the mitre root
CNA scorecard C 75/100 over 2956 records in the last 180 days details
References
Impacted products
Vendor Product Version
WPDeveloper Essential Addons for Elementor Affected: 0 , ≤ 6.8.5 (custom)
Create a notification for this product.
Date Public
2026-10-17 08:22
Credits
Adam Kahlon (Adkali) | Patchstack Bug Bounty Program
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110898",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T16:50:25.958773Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T16:50:35.254Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "essential-addons-for-elementor-lite",
          "product": "Essential Addons for Elementor",
          "vendor": "WPDeveloper",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.8.6",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "6.8.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Adam Kahlon (Adkali) | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-10-17T08:22:57.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.\u003cp\u003eThis issue affects Essential Addons for Elementor: from n/a through 6.8.5.\u003c/p\u003e"
            }
          ],
          "value": "Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T09:09:19.416Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/wordpress/plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-essential-addons-for-elementor-plugin-6-8-5-privilege-escalation-vulnerability?_s_id=cve"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update the WordPress Essential Addons for Elementor plugin to the latest available version (at least 6.8.6)."
            }
          ],
          "value": "Update the WordPress Essential Addons for Elementor plugin to the latest available version (at least 6.8.6)."
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "WordPress Essential Addons for Elementor plugin \u003c= 6.8.5 - Privilege Escalation vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-110898",
    "datePublished": "2026-10-19T09:09:19.416Z",
    "dateReserved": "2026-10-15T00:19:27.828Z",
    "dateUpdated": "2026-10-19T16:50:35.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-110373 (GCVE-0-2026-110373)

Vulnerability from cvelistv5 – Published: 2026-10-18 11:00 – Updated: 2026-10-19 18:56 X_Open Source
VLAI
Title
WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77.
Severity
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 18:56 UTC
CWE
  • CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack CNA under the mitre root
CNA scorecard C 75/100 over 2956 records in the last 180 days details
References
Impacted products
Vendor Product Version
Hamid Alinia Login with phone number Affected: 0 , ≤ 1.8.77 (custom)
Create a notification for this product.
Date Public
2026-10-16 10:41
Credits
Peter Tang | Patchstack Bug Bounty Program
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110373",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T18:56:17.642158Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T18:56:33.875Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "login-with-phone-number",
          "product": "Login with phone number",
          "vendor": "Hamid Alinia",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.8.78",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "1.8.77",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Peter Tang | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-10-16T10:41:41.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.\u003cp\u003eThis issue affects Login with phone number: from n/a through 1.8.77.\u003c/p\u003e"
            }
          ],
          "value": "Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-18T11:00:30.495Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/wordpress/plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-8-77-privilege-escalation-vulnerability?_s_id=cve"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update the WordPress Login with phone number plugin to the latest available version (at least 1.8.78)."
            }
          ],
          "value": "Update the WordPress Login with phone number plugin to the latest available version (at least 1.8.78)."
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "WordPress Login with phone number plugin \u003c= 1.8.77 - Privilege Escalation vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-110373",
    "datePublished": "2026-10-18T11:00:30.495Z",
    "dateReserved": "2026-10-14T00:22:17.449Z",
    "dateUpdated": "2026-10-19T18:56:33.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-110372 (GCVE-0-2026-110372)

Vulnerability from cvelistv5 – Published: 2026-10-18 11:00 – Updated: 2026-10-19 19:01 X_Known Exploited Vulnerability X_Open Source
VLAI
Title
WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: yes Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 19:00 UTC
CWE
  • CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack CNA under the mitre root
CNA scorecard C 75/100 over 2956 records in the last 180 days details
References
Impacted products
Vendor Product Version
Brainstorm Force OttoKit Affected: 0 , ≤ 1.1.40 (custom)
Create a notification for this product.
Date Public
2026-10-16 10:36
Credits
Peter Tang | Patchstack Bug Bounty Program
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-110372",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T19:00:58.973119Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T19:01:11.342Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "suretriggers",
          "product": "OttoKit",
          "vendor": "Brainstorm Force",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.1.41",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "1.1.40",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Peter Tang | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-10-16T10:36:59.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.\u003cp\u003eThis issue affects OttoKit: from n/a through 1.1.40.\u003c/p\u003e"
            }
          ],
          "value": "Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T06:38:35.899Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-ottokit-plugin-1-1-40-privilege-escalation-vulnerability?_s_id=cve"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update the WordPress OttoKit plugin to the latest available version (at least 1.1.41)."
            }
          ],
          "value": "Update the WordPress OttoKit plugin to the latest available version (at least 1.1.41)."
        }
      ],
      "tags": [
        "x_known-exploited-vulnerability",
        "x_open-source"
      ],
      "title": "WordPress OttoKit plugin \u003c= 1.1.40 - Privilege Escalation vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-110372",
    "datePublished": "2026-10-18T11:00:28.694Z",
    "dateReserved": "2026-10-14T00:22:17.449Z",
    "dateUpdated": "2026-10-19T19:01:11.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109892 (GCVE-0-2026-109892)

Vulnerability from cvelistv5 – Published: 2026-10-15 13:00 – Updated: 2026-10-15 13:18 X_Open Source
VLAI
Title
WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: yes Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 13:18 UTC
CWE
  • CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack CNA under the mitre root
CNA scorecard C 75/100 over 2956 records in the last 180 days details
References
Impacted products
Vendor Product Version
Shabti Kaplan Frontend Admin by DynamiApps Affected: 0 , ≤ 3.29.13 (custom)
Create a notification for this product.
Date Public
2026-10-13 12:52
Credits
Zein | Patchstack Bug Bounty Program
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T13:18:35.726176Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T13:18:44.529Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "acf-frontend-form-element",
          "product": "Frontend Admin by DynamiApps",
          "vendor": "Shabti Kaplan",
          "versions": [
            {
              "lessThanOrEqual": "3.29.13",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Zein | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-10-13T12:52:01.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.\u003cp\u003eThis issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.\u003c/p\u003e"
            }
          ],
          "value": "Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T13:00:23.774Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-29-13-privilege-escalation-vulnerability?_s_id=cve"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "WordPress Frontend Admin by DynamiApps plugin \u003c= 3.29.13 - Privilege Escalation vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-109892",
    "datePublished": "2026-10-15T13:00:23.774Z",
    "dateReserved": "2026-10-13T09:24:58.244Z",
    "dateUpdated": "2026-10-15T13:18:44.529Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109694 (GCVE-0-2026-109694)

Vulnerability from cvelistv5 – Published: 2026-10-15 11:00 – Updated: 2026-10-15 14:37 X_Open Source
VLAI
Title
WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: yes Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 14:37 UTC
CWE
  • CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack CNA under the mitre root
CNA scorecard C 75/100 over 2956 records in the last 180 days details
References
Impacted products
Vendor Product Version
WP ManageNinja LLC Fluent CRM Affected: 0 , ≤ 3.2.5 (custom)
Create a notification for this product.
Date Public
2026-10-13 10:57
Credits
AndrewN | Patchstack Bug Bounty Program
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109694",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T14:37:38.933093Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T14:37:51.972Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "fluent-crm",
          "product": "Fluent CRM",
          "vendor": "WP ManageNinja LLC",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.6",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "3.2.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "AndrewN | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-10-13T10:57:26.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.\u003cp\u003eThis issue affects Fluent CRM: from n/a through 3.2.5.\u003c/p\u003e"
            }
          ],
          "value": "Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T11:00:13.754Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/wordpress/plugin/fluent-crm/vulnerability/wordpress-fluent-crm-plugin-3-2-5-privilege-escalation-vulnerability?_s_id=cve"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update the WordPress Fluent CRM plugin to the latest available version (at least 3.2.6)."
            }
          ],
          "value": "Update the WordPress Fluent CRM plugin to the latest available version (at least 3.2.6)."
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "WordPress Fluent CRM plugin \u003c= 3.2.5 - Privilege Escalation vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-109694",
    "datePublished": "2026-10-15T11:00:13.754Z",
    "dateReserved": "2026-10-13T00:19:42.201Z",
    "dateUpdated": "2026-10-15T14:37:51.972Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109693 (GCVE-0-2026-109693)

Vulnerability from cvelistv5 – Published: 2026-10-15 12:09 – Updated: 2026-10-16 15:09 X_Open Source
VLAI
Title
WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.
Severity
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: yes Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-16 14:49 UTC
CWE
  • CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack CNA under the mitre root
CNA scorecard C 75/100 over 2956 records in the last 180 days details
References
Impacted products
Vendor Product Version
WP ManageNinja LLC Fluent CRM Affected: 0 , ≤ 3.2.5 (custom)
Create a notification for this product.
Date Public
2026-10-13 11:00
Credits
SVO | Patchstack Bug Bounty Program
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109693",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-16T14:49:19.862773Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T15:09:42.546Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "fluent-crm",
          "product": "Fluent CRM",
          "vendor": "WP ManageNinja LLC",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.6",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "3.2.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "SVO | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-10-13T11:00:24.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.\u003cp\u003eThis issue affects Fluent CRM: from n/a through 3.2.5.\u003c/p\u003e"
            }
          ],
          "value": "Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T12:09:04.952Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/wordpress/plugin/fluent-crm/vulnerability/wordpress-fluent-crm-plugin-3-2-5-privilege-escalation-vulnerability-2?_s_id=cve"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update the WordPress Fluent CRM plugin to the latest available version (at least 3.2.6)."
            }
          ],
          "value": "Update the WordPress Fluent CRM plugin to the latest available version (at least 3.2.6)."
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "WordPress Fluent CRM plugin \u003c= 3.2.5 - Privilege Escalation vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2026-109693",
    "datePublished": "2026-10-15T12:09:04.952Z",
    "dateReserved": "2026-10-13T00:19:42.201Z",
    "dateUpdated": "2026-10-16T15:09:42.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109605 (GCVE-0-2026-109605)

Vulnerability from cvelistv5 – Published: 2026-10-13 15:45 – Updated: 2026-10-14 15:04 X_Freeware
VLAI
Title
SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization
Summary
A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Severity
6.9 (Medium)
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
7.3 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
SSVC
Exploitation: poc Automatable: yes Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-14 15:02 UTC
CWE
  • CWE-285 - Improper Authorization
  • CWE-266 - Incorrect Privilege Assignment
Assigner
VulDB CNA under the mitre root
CNA scorecard B 82/100 over 3913 records in the last 180 days details
References
Impacted products
Vendor Product Version
SourceCodester Simple Cafe Billing System Affected: 1.0
    cpe:2.3:a:sourcecodester:simple_cafe_billing_system:*:*:*:*:*:*:*:*
Create a notification for this product.
Credits
SanthoshKumar (VulDB User)
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109605",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T15:02:49.805720Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T15:04:19.655Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://tracexlabs.com/releases/billing-preauth-admin.html"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sourcecodester:simple_cafe_billing_system:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "User Management"
          ],
          "product": "Simple Cafe Billing System",
          "vendor": "SourceCodester",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "SanthoshKumar (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-285",
              "description": "Improper Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T15:45:10.652Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-417228 | SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/417228"
        },
        {
          "name": "VDB-417228 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/417228/cti"
        },
        {
          "name": "CVE-2026-109605 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-109605"
        },
        {
          "name": "Submit #1000551 | SourceCodester  Cafe and Restaurant Billing System e32c5d5  Missing Authorization",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1000551"
        },
        {
          "tags": [
            "exploit",
            "patch"
          ],
          "url": "https://tracexlabs.com/releases/billing-preauth-admin.html"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.sourcecodester.com/"
        }
      ],
      "tags": [
        "x_freeware"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-12T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-12T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-12T23:05:54.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-109605",
    "datePublished": "2026-10-13T15:45:10.652Z",
    "dateReserved": "2026-10-12T21:00:48.798Z",
    "dateUpdated": "2026-10-14T15:04:19.655Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109520 (GCVE-0-2026-109520)

Vulnerability from cvelistv5 – Published: 2026-10-13 14:00 – Updated: 2026-10-15 15:12
VLAI
Title
Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions
Summary
A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
9.3 (Critical)
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X
8.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
8.8 (High)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
SSVC
Exploitation: poc Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 14:54 UTC
CWE
  • CWE-267 - Privilege Defined With Unsafe Actions
  • CWE-266 - Incorrect Privilege Assignment
Assigner
VulDB CNA under the mitre root
CNA scorecard B 82/100 over 3913 records in the last 180 days details
References
URL Tags
https://vuldb.com/vuln/417176 vdb-entrytechnical-description
https://vuldb.com/vuln/417176/cti signaturepermissions-required
https://vuldb.com/cve/CVE-2026-109520 third-party-advisory
https://vuldb.com/submit/984282 third-party-advisory
Impacted products
Vendor Product Version
Colorful iGameCenter Affected: 2.0.0.82
    cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*
Create a notification for this product.
Credits
Element2023H (VulDB User) VulDB CNA Team
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-109520",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T14:54:45.867319Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T15:12:23.910Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Dispatch Handler"
          ],
          "product": "iGameCenter",
          "vendor": "Colorful",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0.82"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Element2023H (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.8,
            "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-267",
              "description": "Privilege Defined With Unsafe Actions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T14:00:15.474Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-417176 | Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/417176"
        },
        {
          "name": "VDB-417176 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/417176/cti"
        },
        {
          "name": "CVE-2026-109520 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-109520"
        },
        {
          "name": "Submit #984282 | Colorful (\u4e03\u5f69\u8679) iGameCenter 2.0.0.82 Incorrect Privilege Assignment",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/984282"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-12T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-12T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-12T20:58:50.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-109520",
    "datePublished": "2026-10-13T14:00:15.474Z",
    "dateReserved": "2026-10-12T18:53:27.904Z",
    "dateUpdated": "2026-10-15T15:12:23.910Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}
Mitigation MIT-1
Architecture and Design Operation

Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

Mitigation MIT-17
Architecture and Design Operation

Strategy: Environment Hardening

Run your code using the lowest privileges that are required to accomplish the necessary tasks [REF-76]. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.

No CAPEC attack patterns related to this CWE.

← Back to the CWE list