Privilege Escalation

Connection graph

Recent events

• CVE-2026-1749 - HikCentral Professional Unauthenticated Admin Privilege Escalation

  CVE Feed Latest · 2h ago

• CVE-2026-44987 - SysReptor: Privilege Escalation from User Admin to Superuser

  CVE Feed Latest · 11h ago

• CVE-2026-42185 - People: Privilege Escalation via Missing Role Ceiling in Mail Domain Invitation

  CVE Feed Latest · 14h ago

• Architecting for Trust: Building a Multi-Role Admin Platform with React and Express

  Dev.to · 18h ago

• V4bel/dirtyfrag - Universal Linux Local Privilege Escalation

  Reddit r/cybersecurity · 1d ago

• CVE-2026-43578 - OpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgrade

  CVE Feed Latest · 2d ago

• CVE-2026-43568 - OpenClaw 2026.4.5 < 2026.4.10 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint

  CVE Feed Latest · 3d ago

• CVE-2026-43566 - OpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events

  CVE Feed Latest · 3d ago

• CVE-2026-31205 - Pluck CMS Cross Site Scripting (XSS) Privilege Escalation

  CVE Feed Latest · 4d ago

• CVE-2026-7641 - Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields

  CVE Feed Latest · 7d ago

• CVE-2026-41359 - OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

  CVE Feed Latest · 15d ago

• CVE-2026-41344 - OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter

  CVE Feed Latest · 15d ago

• CVE-2026-41208 - Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution

  CVE Feed Latest · 16d ago