CWE-272 · 26 kayıt
Least Privilege Violation
Bu sınıftaki CVE’ler
26 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2025-59106İstismar yok | Web Server Running with Root Privileges in dormakaba access managerdormakabagroup · dormakaba access manager 9200-k7 firmware · CWE-272 | Yüksek8,8 | — | %0,8 | 26 Oca 2026 |
35İzleyin | CVE-2025-7722İstismar yok | Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalationsteverio · social streams · CWE-272 | Yüksek8,8 | — | %0,4 | 22 Tem 2025 |
34İzleyin | CVE-2026-39459İstismar yok | iControl REST and tmsh vulnerabilityf5 · big-ip access policy manager · CWE-272 | Yüksek8,6 | — | %0,5 | 13 May 2026 |
34İzleyin | CVE-2025-9711İstismar yok | Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2bbroadcom · fabric operating system · CWE-272 | Yüksek8,5 | — | %0,1 | 3 Şub 2026 |
33İzleyin | CVE-2024-35204İstismar yok | Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users cCWE-272 | Yüksek8,4 | — | %0,2 | 14 May 2024 |
32İzleyin | CVE-2026-103504İstismar yok | Gitea API team demotion not applied to unit permissionsgitea · gitea · CWE-272 | Yüksek8,1 | — | %0,3 | 3 gün önce |
32İzleyin | CVE-2025-47809İstismar yok | Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).wibu · codemeter · CWE-272 | Yüksek8,2 | — | %0,2 | 15 May 2025 |
31İzleyin | CVE-2024-27165İstismar yok | Local Privilege Escalationtoshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp) · CWE-272 | Yüksek7,8 | — | %0,2 | 14 Haz 2024 |
31İzleyin | CVE-2024-28824İstismar yok | Privilege escalation in mk_informix plugincheckmk · checkmk · CWE-272 | Yüksek7,8 | — | %0,2 | 22 Mar 2024 |
31İzleyin | CVE-2023-28047İstismar yok | Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation.dell · display manager · CWE-272 | Yüksek7,8 | — | %0,2 | 20 Nis 2023 |
31İzleyin | CVE-2023-32451İstismar yok | Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during instdell · display manager · CWE-272 | Yüksek7,8 | — | %0,2 | 6 Şub 2024 |
31İzleyin | CVE-2026-32655İstismar yok | Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability.dell · alienware command center · CWE-272 | Yüksek7,8 | — | %0,1 | 27 Nis 2026 |
29İzleyin | CVE-2025-49144Kavram kanıtı | Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Pathnotepad-plus-plus · notepad-plus-plus · CWE-272 | Yüksek7,3 | — | %0,7 | 23 Haz 2025 |
29İzleyin | CVE-2026-59915İstismar yok | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability.dell · alienware command center (awcc) · CWE-272 | Yüksek7,3 | — | %0,1 | 18 Ağu 2026 |
28İzleyin | CVE-2025-1384İstismar yok | Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllersomron corporation · machine automation controller nj-series · CWE-272 | Yüksek7,0 | — | %0,2 | 13 Tem 2025 |
28İzleyin | CVE-2023-28046İstismar yok | Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local ldell · display manager · CWE-272 | Yüksek7,1 | — | %0,1 | 6 Nis 2023 |
26İzleyin | CVE-2024-0798İstismar yok | Privilege Escalation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-272 | Orta6,5 | — | %0,6 | 26 Şub 2024 |
26İzleyin | CVE-2025-62299İstismar yok | HCL IntelliOps Event Management is affected by multiple security vulnerabilities.hcl software · iem · CWE-272 | Orta6,6 | — | %0,3 | 20 Ağu 2026 |
26İzleyin | CVE-2025-68267İstismar yok | In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installajetbrains · teamcity · CWE-272 | Orta6,5 | — | %0,2 | 16 Ara 2025 |
26İzleyin | CVE-2024-0638İstismar yok | Privilege escalation in mk_oracle pluginscheckmk · checkmk · CWE-272 | Orta6,7 | — | %0,2 | 22 Mar 2024 |
24İzleyin | CVE-2026-49500İstismar yok | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following')dell · alienware command center (awcc · CWE-272 | Orta6,0 | — | %0,1 | 18 Ağu 2026 |
20İzleyin | CVE-2024-28829İstismar yok | Privilege escalation in mk_informix plugincheckmk · checkmk · CWE-272 | Orta5,2 | — | %0,2 | 20 Ağu 2024 |
17İzleyin | CVE-2026-23634İstismar yok | Pepr Overly Permissive RBAC ClusterRole in Admin Modedefenseunicorns · pepr · CWE-272 | Orta4,3 | — | %0,3 | 16 Oca 2026 |
13İzleyin | CVE-2026-79693İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Videll · secure connect gateway · CWE-272 | Düşük3,4 | — | %0,1 | 9 Eyl 2026 |
13İzleyin | CVE-2026-79944İstismar yok | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Videll · secure connect gateway · CWE-272 | Düşük3,4 | — | %0,1 | 9 Eyl 2026 |
- CVE-2025-5910635İzleyin
Web Server Running with Root Privileges in dormakaba access manager
YüksekCVSS 8,8İstismar yokEPSS %1dormakabagroup · dormakaba access manager 9200-k7 firmware26 Oca 2026
- CVE-2025-772235İzleyin
Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation
YüksekCVSS 8,8İstismar yokEPSS %0steverio · social streams22 Tem 2025
- CVE-2026-3945934İzleyin
iControl REST and tmsh vulnerability
YüksekCVSS 8,6İstismar yokEPSS %0f5 · big-ip access policy manager13 May 2026
- CVE-2025-971134İzleyin
Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
YüksekCVSS 8,5İstismar yokEPSS %0broadcom · fabric operating system3 Şub 2026
- CVE-2024-3520433İzleyin
Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users c
YüksekCVSS 8,4İstismar yokEPSS %014 May 2024
- CVE-2026-10350432İzleyin
Gitea API team demotion not applied to unit permissions
YüksekCVSS 8,1İstismar yokEPSS %0gitea · gitea3 gün önce
- CVE-2025-4780932İzleyin
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).
YüksekCVSS 8,2İstismar yokEPSS %0wibu · codemeter15 May 2025
- CVE-2024-2716531İzleyin
Local Privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)14 Haz 2024
- CVE-2024-2882431İzleyin
Privilege escalation in mk_informix plugin
YüksekCVSS 7,8İstismar yokEPSS %0checkmk · checkmk22 Mar 2024
- CVE-2023-2804731İzleyin
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation.
YüksekCVSS 7,8İstismar yokEPSS %0dell · display manager20 Nis 2023
- CVE-2023-3245131İzleyin
Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during inst
YüksekCVSS 7,8İstismar yokEPSS %0dell · display manager6 Şub 2024
- CVE-2026-3265531İzleyin
Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability.
YüksekCVSS 7,8İstismar yokEPSS %0dell · alienware command center27 Nis 2026
- CVE-2025-4914429İzleyin
Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path
YüksekCVSS 7,3Kavram kanıtıEPSS %1notepad-plus-plus · notepad-plus-plus23 Haz 2025
- CVE-2026-5991529İzleyin
Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability.
YüksekCVSS 7,3İstismar yokEPSS %0dell · alienware command center (awcc)18 Ağu 2026
- CVE-2025-138428İzleyin
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
YüksekCVSS 7,0İstismar yokEPSS %0omron corporation · machine automation controller nj-series13 Tem 2025
- CVE-2023-2804628İzleyin
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local l
YüksekCVSS 7,1İstismar yokEPSS %0dell · display manager6 Nis 2023
- CVE-2024-079826İzleyin
Privilege Escalation in mintplex-labs/anything-llm
OrtaCVSS 6,5İstismar yokEPSS %1mintplexlabs · anythingllm26 Şub 2024
- CVE-2025-6229926İzleyin
HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
OrtaCVSS 6,6İstismar yokEPSS %0hcl software · iem20 Ağu 2026
- CVE-2025-6826726İzleyin
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installa
OrtaCVSS 6,5İstismar yokEPSS %0jetbrains · teamcity16 Ara 2025
- CVE-2024-063826İzleyin
Privilege escalation in mk_oracle plugins
OrtaCVSS 6,7İstismar yokEPSS %0checkmk · checkmk22 Mar 2024
- CVE-2026-4950024İzleyin
Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following')
OrtaCVSS 6,0İstismar yokEPSS %0dell · alienware command center (awcc18 Ağu 2026
- CVE-2024-2882920İzleyin
Privilege escalation in mk_informix plugin
OrtaCVSS 5,2İstismar yokEPSS %0checkmk · checkmk20 Ağu 2024
- CVE-2026-2363417İzleyin
Pepr Overly Permissive RBAC ClusterRole in Admin Mode
OrtaCVSS 4,3İstismar yokEPSS %0defenseunicorns · pepr16 Oca 2026
- CVE-2026-7969313İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Vi
DüşükCVSS 3,4İstismar yokEPSS %0dell · secure connect gateway9 Eyl 2026
- CVE-2026-7994413İzleyin
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Vi
DüşükCVSS 3,4İstismar yokEPSS %0dell · secure connect gateway9 Eyl 2026