Common Weakness Enumeration
CWE-266
AllowedIncorrect Privilege Assignment
Abstraction: Base · Status: Draft
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
1235 vulnerabilities reference this CWE, most recent first.
CVE-2026-123676 (GCVE-0-2026-123676)
Vulnerability from cvelistv5 – Published: 2026-11-06 15:30 – Updated: 2026-11-06 15:30 X_Open Source
VLAI
EPSS
VEX
Title
xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization
Summary
A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Content Service. Such manipulation of the argument chapterId leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 966c4bdde3521dc0a165d15a2acff66ee33eaaa7. Applying a patch is advised to resolve this issue.
Severity
Assigner
VulDB
CNA
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/431793 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/431793/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-123676 | third-party-advisory |
| https://vuldb.com/submit/1033603 | third-party-advisory |
| https://github.com/201206030/novel/pull/52 | exploitissue-trackingpatch |
| https://github.com/201206030/novel/commit/966c4bd… | patch |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| xxyopen | novel |
Affected:
3.0
Affected: 3.1 Affected: 3.2 Affected: 3.3 Affected: 3.4 Affected: 3.5.0 cpe:2.3:a:xxyopen:novel:*:*:*:*:*:*:*:* |
|
| 201206030 | novel |
Affected:
3.0
Affected: 3.1 Affected: 3.2 Affected: 3.3 Affected: 3.4 Affected: 3.5.0 cpe:2.3:a:201206030:novel:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:xxyopen:novel:*:*:*:*:*:*:*:*"
],
"modules": [
"Book Content Service"
],
"product": "novel",
"vendor": "xxyopen",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
},
{
"status": "affected",
"version": "3.4"
},
{
"status": "affected",
"version": "3.5.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:201206030:novel:*:*:*:*:*:*:*:*"
],
"modules": [
"Book Content Service"
],
"product": "novel",
"vendor": "201206030",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.3"
},
{
"status": "affected",
"version": "3.4"
},
{
"status": "affected",
"version": "3.5.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "carfeii (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Content Service. Such manipulation of the argument chapterId leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 966c4bdde3521dc0a165d15a2acff66ee33eaaa7. Applying a patch is advised to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T15:30:23.322Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-431793 | xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/431793"
},
{
"name": "VDB-431793 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/431793/cti"
},
{
"name": "CVE-2026-123676 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-123676"
},
{
"name": "Submit #1033603 | https://github.com/201206030/ novel 3.5.0 Missing Authorization",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1033603"
},
{
"tags": [
"exploit",
"issue-tracking",
"patch"
],
"url": "https://github.com/201206030/novel/pull/52"
},
{
"tags": [
"patch"
],
"url": "https://github.com/201206030/novel/commit/966c4bdde3521dc0a165d15a2acff66ee33eaaa7"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-11-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-06T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-06T10:43:55.000Z",
"value": "VulDB entry last update"
}
],
"title": "xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-123676",
"datePublished": "2026-11-06T15:30:23.322Z",
"dateReserved": "2026-11-06T09:38:50.094Z",
"dateUpdated": "2026-11-06T15:30:23.322Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-123665 (GCVE-0-2026-123665)
Vulnerability from cvelistv5 – Published: 2026-11-06 14:45 – Updated: 2026-11-09 22:46 X_Open Source
VLAI
EPSS
VEX
Title
kubescape Output printresults.go GetWriter permission
Summary
A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-09 22:34 UTC
Assigner
VulDB
CNA
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/431789 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/431789/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-123665 | third-party-advisory |
| https://vuldb.com/submit/1033587 | third-party-advisory |
| https://github.com/kubescape/kubescape/issues/4091 | issue-tracking |
| https://github.com/kubescape/kubescape/pull/4092 | issue-trackingpatch |
| https://github.com/kubescape/kubescape/commit/d90… | patch |
| https://github.com/kubescape/kubescape/releases/t… | patch |
| https://github.com/kubescape/kubescape/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | kubescape |
Affected:
4.0.0
Affected: 4.0.1 Affected: 4.0.2 Affected: 4.0.3 Affected: 4.0.4 Affected: 4.0.5 Affected: 4.0.6 Affected: 4.0.7 Affected: 4.0.8 Affected: 4.0.9 Affected: 4.0.10 Affected: 4.0.11 Affected: 4.0.12 Affected: 4.0.13 Affected: 4.0.14 Affected: 4.0.15 Unaffected: 4.0.16 cpe:2.3:a:kubescape:kubescape:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-123665",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T22:34:29.730765Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T22:46:14.188Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:kubescape:kubescape:*:*:*:*:*:*:*:*"
],
"modules": [
"Output"
],
"product": "kubescape",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "4.0.0"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.0.4"
},
{
"status": "affected",
"version": "4.0.5"
},
{
"status": "affected",
"version": "4.0.6"
},
{
"status": "affected",
"version": "4.0.7"
},
{
"status": "affected",
"version": "4.0.8"
},
{
"status": "affected",
"version": "4.0.9"
},
{
"status": "affected",
"version": "4.0.10"
},
{
"status": "affected",
"version": "4.0.11"
},
{
"status": "affected",
"version": "4.0.12"
},
{
"status": "affected",
"version": "4.0.13"
},
{
"status": "affected",
"version": "4.0.14"
},
{
"status": "affected",
"version": "4.0.15"
},
{
"status": "unaffected",
"version": "4.0.16"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "carfeii (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access. Upgrading to version 4.0.16 is recommended to address this issue. This patch is called d90f77314c7d4f2b53cf2425844bde2315bd26d2. Upgrading the affected component is advised."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-275",
"description": "Permission Issues",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T14:45:22.473Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-431789 | kubescape Output printresults.go GetWriter permission",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/431789"
},
{
"name": "VDB-431789 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/431789/cti"
},
{
"name": "CVE-2026-123665 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-123665"
},
{
"name": "Submit #1033587 | https://github.com/kubescape/ kubescape 4.0.12 Incorrect Permission Assignment for Critical Resource",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1033587"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/kubescape/kubescape/issues/4091"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/kubescape/kubescape/pull/4092"
},
{
"tags": [
"patch"
],
"url": "https://github.com/kubescape/kubescape/commit/d90f77314c7d4f2b53cf2425844bde2315bd26d2"
},
{
"tags": [
"patch"
],
"url": "https://github.com/kubescape/kubescape/releases/tag/v4.0.16"
},
{
"tags": [
"product"
],
"url": "https://github.com/kubescape/kubescape/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-11-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-06T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-06T10:26:37.000Z",
"value": "VulDB entry last update"
}
],
"title": "kubescape Output printresults.go GetWriter permission",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-123665",
"datePublished": "2026-11-06T14:45:22.473Z",
"dateReserved": "2026-11-06T09:21:22.516Z",
"dateUpdated": "2026-11-09T22:46:14.188Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-123664 (GCVE-0-2026-123664)
Vulnerability from cvelistv5 – Published: 2026-11-06 14:30 – Updated: 2026-11-06 14:30
VLAI
EPSS
VEX
Title
nasa-gcn gcn.nasa.gov Email Notification email improper authorization
Summary
A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance.
Severity
Assigner
VulDB
CNA
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/431788 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/431788/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-123664 | third-party-advisory |
| https://vuldb.com/submit/1033135 | third-party-advisory |
| https://github.com/nasa-gcn/gcn.nasa.gov/issues/3805 | exploitgovernment-resourceissue-tracking |
| https://https:/github.com/nasa-gcn/gcn.nasa.gov/p… | broken-linkgovernment-resourceissue-trackingpatch |
| https://github.com/nasa-gcn/gcn.nasa.gov/ | government-resourceproduct |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| nasa-gcn | gcn.nasa.gov |
Affected:
b299b562af665878964b981a459f0a9c04b11adf
cpe:2.3:a:nasa-gcn:gcn.nasa.gov:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:nasa-gcn:gcn.nasa.gov:*:*:*:*:*:*:*:*"
],
"modules": [
"Email Notification Handler"
],
"product": "gcn.nasa.gov",
"vendor": "nasa-gcn",
"versions": [
{
"status": "affected",
"version": "b299b562af665878964b981a459f0a9c04b11adf"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "NirvanaOn (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in nasa-gcn gcn.nasa.gov up to b299b562af665878964b981a459f0a9c04b11adf. This issue affects some unknown processing of the file /user/email of the component Email Notification Handler. Performing a manipulation of the argument Recipient results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.5,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T14:30:21.995Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-431788 | nasa-gcn gcn.nasa.gov Email Notification email improper authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/431788"
},
{
"name": "VDB-431788 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/431788/cti"
},
{
"name": "CVE-2026-123664 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-123664"
},
{
"name": "Submit #1033135 | GitHub https://github.com/nasa-gcn/gcn.nasa.gov 4.7.10 Insufficient Verification of Data Authenticity",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1033135"
},
{
"tags": [
"exploit",
"government-resource",
"issue-tracking"
],
"url": "https://github.com/nasa-gcn/gcn.nasa.gov/issues/3805"
},
{
"tags": [
"broken-link",
"government-resource",
"issue-tracking",
"patch"
],
"url": "https://https:/github.com/nasa-gcn/gcn.nasa.gov/pull/3863"
},
{
"tags": [
"government-resource",
"product"
],
"url": "https://github.com/nasa-gcn/gcn.nasa.gov/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-06T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-06T10:24:17.000Z",
"value": "VulDB entry last update"
}
],
"title": "nasa-gcn gcn.nasa.gov Email Notification email improper authorization",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-123664",
"datePublished": "2026-11-06T14:30:21.995Z",
"dateReserved": "2026-11-06T09:19:10.777Z",
"dateUpdated": "2026-11-06T14:30:21.995Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-122158 (GCVE-0-2026-122158)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:00 – Updated: 2026-11-05 20:37 X_Open Source
VLAI
EPSS
VEX
Title
InvoiceShelf MemberService.php create access control
Summary
A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies[].id/companies[].role results in improper access controls. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.4.4 and 3.0.0-alpha.4 can resolve this issue. The patch is named c798b513c3ab6e672a1678774720fbb282f4d0c6. It is recommended to upgrade the affected component.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-05 20:37 UTC
Assigner
VulDB
CNA
References
10 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/431158 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/431158/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-122158 | third-party-advisory |
| https://vuldb.com/submit/1028117 | third-party-advisory |
| https://github.com/InvoiceShelf/InvoiceShelf/secu… | related |
| https://github.com/InvoiceShelf/InvoiceShelf/pull/822 | issue-trackingpatch |
| https://github.com/capivara-research/GHSA-c9cx-7r… | exploit |
| https://github.com/InvoiceShelf/InvoiceShelf/comm… | patch |
| https://github.com/InvoiceShelf/InvoiceShelf/rele… | patch |
| https://github.com/InvoiceShelf/InvoiceShelf/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | InvoiceShelf |
Affected:
2.4.0
Affected: 2.4.1 Affected: 2.4.2 Affected: 2.4.3 Affected: 3.0.0-alpha.0 Affected: 3.0.0-alpha.1 Affected: 3.0.0-alpha.2 Affected: 3.0.0-alpha.3 Unaffected: 2.4.4 Unaffected: 3.0.0-alpha.4 cpe:2.3:a:invoiceshelf:invoiceshelf:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-122158",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-05T20:37:24.810558Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T20:37:38.053Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:invoiceshelf:invoiceshelf:*:*:*:*:*:*:*:*"
],
"product": "InvoiceShelf",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "2.4.0"
},
{
"status": "affected",
"version": "2.4.1"
},
{
"status": "affected",
"version": "2.4.2"
},
{
"status": "affected",
"version": "2.4.3"
},
{
"status": "affected",
"version": "3.0.0-alpha.0"
},
{
"status": "affected",
"version": "3.0.0-alpha.1"
},
{
"status": "affected",
"version": "3.0.0-alpha.2"
},
{
"status": "affected",
"version": "3.0.0-alpha.3"
},
{
"status": "unaffected",
"version": "2.4.4"
},
{
"status": "unaffected",
"version": "3.0.0-alpha.4"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fernando viana (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.3. Affected by this issue is the function MemberService::create of the file app/Domains/Accounts/Application/MemberService.php. Performing a manipulation of the argument companies[].id/companies[].role results in improper access controls. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.4.4 and 3.0.0-alpha.4 can resolve this issue. The patch is named c798b513c3ab6e672a1678774720fbb282f4d0c6. It is recommended to upgrade the affected component."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.8,
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:00:29.677Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-431158 | InvoiceShelf MemberService.php create access control",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/431158"
},
{
"name": "VDB-431158 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/431158/cti"
},
{
"name": "CVE-2026-122158 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-122158"
},
{
"name": "Submit #1028117 | InvoiceShelf up to 2.4.3/3.0.0-alpha.1/3.0.0-alpha.2/3.0.0-alpha.3 Cross-Tenant Privilege Escalation / Incorrect Authorization",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1028117"
},
{
"tags": [
"related"
],
"url": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-c9cx-7r7m-264v"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/InvoiceShelf/InvoiceShelf/pull/822"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/capivara-research/GHSA-c9cx-7r7m-264v"
},
{
"tags": [
"patch"
],
"url": "https://github.com/InvoiceShelf/InvoiceShelf/commit/c798b513c3ab6e672a1678774720fbb282f4d0c6"
},
{
"tags": [
"patch"
],
"url": "https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/3.0.0-alpha.4"
},
{
"tags": [
"product"
],
"url": "https://github.com/InvoiceShelf/InvoiceShelf/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-11-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-04T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-04T19:45:34.000Z",
"value": "VulDB entry last update"
}
],
"title": "InvoiceShelf MemberService.php create access control",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-122158",
"datePublished": "2026-11-05T02:00:29.677Z",
"dateReserved": "2026-11-04T18:40:29.450Z",
"dateUpdated": "2026-11-05T20:37:38.053Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-122016 (GCVE-0-2026-122016)
Vulnerability from cvelistv5 – Published: 2026-11-04 21:30 – Updated: 2026-11-09 17:01
VLAI
EPSS
VEX
Title
yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management
Summary
A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPermissionService.getMenuPermission of the file SysPermissionService.java of the component Permission Service. This manipulation of the argument perms causes improper privilege management. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-09 17:00 UTC
Assigner
VulDB
CNA
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/431084 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/431084/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-122016 | third-party-advisory |
| https://vuldb.com/submit/1024636 | third-party-advisory |
| https://github.com/yangzongzhuan/RuoYi-Vue/issues/206 | issue-tracking |
| https://github.com/yangzongzhuan/RuoYi-Vue/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| yangzongzhuan | RuoYi-Vue |
Affected:
3.9.0
Affected: 3.9.1 Affected: 3.9.2 cpe:2.3:a:yangzongzhuan:ruoyi-vue:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-122016",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T17:00:53.321683Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T17:01:22.932Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/yangzongzhuan/RuoYi-Vue/issues/206"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:yangzongzhuan:ruoyi-vue:*:*:*:*:*:*:*:*"
],
"modules": [
"Permission Service"
],
"product": "RuoYi-Vue",
"vendor": "yangzongzhuan",
"versions": [
{
"status": "affected",
"version": "3.9.0"
},
{
"status": "affected",
"version": "3.9.1"
},
{
"status": "affected",
"version": "3.9.2"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "OMrYangO (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. This issue affects the function SysPermissionService.getMenuPermission of the file SysPermissionService.java of the component Permission Service. This manipulation of the argument perms causes improper privilege management. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T21:30:14.847Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-431084 | yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/431084"
},
{
"name": "VDB-431084 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/431084/cti"
},
{
"name": "CVE-2026-122016 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-122016"
},
{
"name": "Submit #1024636 | yangzongzhuan RuoYi-Vue 3.9.2 Improper Privilege Management",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1024636"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/yangzongzhuan/RuoYi-Vue/issues/206"
},
{
"tags": [
"product"
],
"url": "https://github.com/yangzongzhuan/RuoYi-Vue/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-04T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-04T15:38:11.000Z",
"value": "VulDB entry last update"
}
],
"title": "yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-122016",
"datePublished": "2026-11-04T21:30:14.847Z",
"dateReserved": "2026-11-04T14:33:07.089Z",
"dateUpdated": "2026-11-09T17:01:22.932Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-121576 (GCVE-0-2026-121576)
Vulnerability from cvelistv5 – Published: 2026-11-09 17:00 – Updated: 2026-11-09 17:14 X_Open Source
VLAI
EPSS
VEX
Title
WordPress MCP Server for WordPress plugin <= 2.0.1 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-09 17:14 UTC
CWE
- CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://patchstack.com/database/wordpress/plugin/… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| AtlasAiDev | MCP Server for WordPress |
Affected:
0 , ≤ 2.0.1
(custom)
|
Date Public
2026-11-07 16:39
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121576",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T17:14:37.817542Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T17:14:45.380Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "ai-workflow-automation-ai-agent-hub",
"product": "MCP Server for WordPress",
"vendor": "AtlasAiDev",
"versions": [
{
"changes": [
{
"at": "2.0.2",
"status": "unaffected"
}
],
"lessThanOrEqual": "2.0.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "myhappyhoon | Patchstack Bug Bounty Program"
}
],
"datePublic": "2026-11-07T16:39:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.\u003cp\u003eThis issue affects MCP Server for WordPress: from n/a through 2.0.1.\u003c/p\u003e"
}
],
"value": "Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1."
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "Privilege Escalation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T17:00:20.536Z",
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"shortName": "Patchstack"
},
"references": [
{
"tags": [
"vdb-entry"
],
"url": "https://patchstack.com/database/wordpress/plugin/ai-workflow-automation-ai-agent-hub/vulnerability/wordpress-mcp-server-for-wordpress-plugin-2-0-1-privilege-escalation-vulnerability?_s_id=cve"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update the WordPress MCP Server for WordPress plugin to the latest available version (at least 2.0.2)."
}
],
"value": "Update the WordPress MCP Server for WordPress plugin to the latest available version (at least 2.0.2)."
}
],
"tags": [
"x_open-source"
],
"title": "WordPress MCP Server for WordPress plugin \u003c= 2.0.1 - Privilege Escalation vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"assignerShortName": "Patchstack",
"cveId": "CVE-2026-121576",
"datePublished": "2026-11-09T17:00:20.536Z",
"dateReserved": "2026-11-03T15:26:43.481Z",
"dateUpdated": "2026-11-09T17:14:45.380Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-121539 (GCVE-0-2026-121539)
Vulnerability from cvelistv5 – Published: 2026-11-03 22:30 – Updated: 2026-11-07 03:36 X_Open Source
VLAI
EPSS
VEX
Title
miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control
Summary
A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-07 03:36 UTC
Assigner
VulDB
CNA
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/430300 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/430300/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-121539 | third-party-advisory |
| https://vuldb.com/submit/1019996 | third-party-advisory |
| https://github.com/waterhunter2000-svg/vulnerabil… | related |
| https://github.com/miroslavpejic85/mirotalk/commi… | patch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| miroslavpejic85 | MiroTalk P2P |
Affected:
2.0.0
Affected: 2.0.1 Affected: 2.0.2 Affected: 2.0.3 Affected: 2.0.4 Affected: 2.0.5 Affected: 2.0.6 Affected: 2.0.7 Affected: 2.0.8 Affected: 2.0.9 Affected: 2.0.10 Affected: 2.0.11 Affected: 2.0.12 Affected: 2.0.13 Affected: 2.0.14 Affected: 2.0.15 Affected: 2.0.16 Affected: 2.0.17 Affected: 2.0.18 Affected: 2.0.19 Affected: 2.0.20 Affected: 2.0.21 Affected: 2.0.22 Affected: 2.0.23 Affected: 2.0.24 Affected: 2.0.25 Affected: 2.0.26 Affected: 2.0.27 Affected: 2.0.28 Affected: 2.0.29 Affected: 2.0.30 Affected: 2.0.31 Affected: 2.0.32 Affected: 2.0.33 Affected: 2.0.34 Affected: 2.0.35 Affected: 2.0.36 Affected: 2.0.37 Affected: 2.0.38 Affected: 2.0.39 Affected: 2.0.40 Affected: 2.0.41 Affected: 2.0.42 Affected: 2.0.43 Affected: 2.0.44 Affected: 2.0.45 Affected: 2.0.46 Affected: 2.0.47 Affected: 2.0.48 Affected: 2.0.49 Affected: 2.0.50 Affected: 2.0.51 Affected: 2.0.52 Affected: 2.0.53 Affected: 2.0.54 Affected: 2.0.55 Affected: 2.0.56 Affected: 2.0.57 Affected: 2.0.58 Affected: 2.0.59 Affected: 2.0.60 Affected: 2.0.61 Affected: 2.0.62 Affected: 2.0.63 Affected: 2.0.64 Affected: 2.0.65 Affected: 2.0.66 Affected: 2.0.67 Affected: 2.0.68 Affected: 2.0.69 Affected: 2.0.70 Affected: 2.0.71 Affected: 2.0.72 Affected: 2.0.73 Affected: 2.0.74 Affected: 2.0.75 Affected: 2.0.76 Affected: 2.0.77 Affected: 2.0.78 Affected: 2.0.79 Affected: 2.0.80 Affected: 2.0.81 Affected: 2.0.82 Affected: 2.0.83 Affected: 2.0.84 Affected: 2.0.85 Affected: 2.0.86 Affected: 2.0.87 Affected: 2.1.0 Affected: 2.1.1 Affected: 2.1.2 Affected: 2.1.3 Affected: 2.1.4 Affected: 2.1.5 Affected: 2.1.6 Affected: 2.1.7 Affected: 2.1.8 Affected: 2.1.9 Affected: 2.1.10 Affected: 2.1.11 Affected: 2.1.12 Affected: 2.1.13 Affected: 2.1.14 Affected: 2.1.15 Affected: 2.1.16 Affected: 2.1.17 Affected: 2.1.18 Affected: 2.1.19 Affected: 2.1.20 Affected: 2.1.21 Affected: 2.1.22 Affected: 2.1.23 Affected: 2.1.24 Affected: 2.1.25 Affected: 2.1.26 Affected: 2.1.27 Affected: 2.1.28 Affected: 2.1.29 Affected: 2.1.30 Affected: 2.1.31 Affected: 2.1.32 Affected: 2.1.33 Affected: 2.1.34 Affected: 2.1.35 Affected: 2.1.36 Affected: 2.1.37 Affected: 2.1.38 Unaffected: 2.1.39 cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121539",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-07T03:36:35.680978Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T03:36:45.712Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:miroslavpejic85:mirotalk_p2p:*:*:*:*:*:*:*:*"
],
"modules": [
"Socket IO Handler"
],
"product": "MiroTalk P2P",
"vendor": "miroslavpejic85",
"versions": [
{
"status": "affected",
"version": "2.0.0"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.0.2"
},
{
"status": "affected",
"version": "2.0.3"
},
{
"status": "affected",
"version": "2.0.4"
},
{
"status": "affected",
"version": "2.0.5"
},
{
"status": "affected",
"version": "2.0.6"
},
{
"status": "affected",
"version": "2.0.7"
},
{
"status": "affected",
"version": "2.0.8"
},
{
"status": "affected",
"version": "2.0.9"
},
{
"status": "affected",
"version": "2.0.10"
},
{
"status": "affected",
"version": "2.0.11"
},
{
"status": "affected",
"version": "2.0.12"
},
{
"status": "affected",
"version": "2.0.13"
},
{
"status": "affected",
"version": "2.0.14"
},
{
"status": "affected",
"version": "2.0.15"
},
{
"status": "affected",
"version": "2.0.16"
},
{
"status": "affected",
"version": "2.0.17"
},
{
"status": "affected",
"version": "2.0.18"
},
{
"status": "affected",
"version": "2.0.19"
},
{
"status": "affected",
"version": "2.0.20"
},
{
"status": "affected",
"version": "2.0.21"
},
{
"status": "affected",
"version": "2.0.22"
},
{
"status": "affected",
"version": "2.0.23"
},
{
"status": "affected",
"version": "2.0.24"
},
{
"status": "affected",
"version": "2.0.25"
},
{
"status": "affected",
"version": "2.0.26"
},
{
"status": "affected",
"version": "2.0.27"
},
{
"status": "affected",
"version": "2.0.28"
},
{
"status": "affected",
"version": "2.0.29"
},
{
"status": "affected",
"version": "2.0.30"
},
{
"status": "affected",
"version": "2.0.31"
},
{
"status": "affected",
"version": "2.0.32"
},
{
"status": "affected",
"version": "2.0.33"
},
{
"status": "affected",
"version": "2.0.34"
},
{
"status": "affected",
"version": "2.0.35"
},
{
"status": "affected",
"version": "2.0.36"
},
{
"status": "affected",
"version": "2.0.37"
},
{
"status": "affected",
"version": "2.0.38"
},
{
"status": "affected",
"version": "2.0.39"
},
{
"status": "affected",
"version": "2.0.40"
},
{
"status": "affected",
"version": "2.0.41"
},
{
"status": "affected",
"version": "2.0.42"
},
{
"status": "affected",
"version": "2.0.43"
},
{
"status": "affected",
"version": "2.0.44"
},
{
"status": "affected",
"version": "2.0.45"
},
{
"status": "affected",
"version": "2.0.46"
},
{
"status": "affected",
"version": "2.0.47"
},
{
"status": "affected",
"version": "2.0.48"
},
{
"status": "affected",
"version": "2.0.49"
},
{
"status": "affected",
"version": "2.0.50"
},
{
"status": "affected",
"version": "2.0.51"
},
{
"status": "affected",
"version": "2.0.52"
},
{
"status": "affected",
"version": "2.0.53"
},
{
"status": "affected",
"version": "2.0.54"
},
{
"status": "affected",
"version": "2.0.55"
},
{
"status": "affected",
"version": "2.0.56"
},
{
"status": "affected",
"version": "2.0.57"
},
{
"status": "affected",
"version": "2.0.58"
},
{
"status": "affected",
"version": "2.0.59"
},
{
"status": "affected",
"version": "2.0.60"
},
{
"status": "affected",
"version": "2.0.61"
},
{
"status": "affected",
"version": "2.0.62"
},
{
"status": "affected",
"version": "2.0.63"
},
{
"status": "affected",
"version": "2.0.64"
},
{
"status": "affected",
"version": "2.0.65"
},
{
"status": "affected",
"version": "2.0.66"
},
{
"status": "affected",
"version": "2.0.67"
},
{
"status": "affected",
"version": "2.0.68"
},
{
"status": "affected",
"version": "2.0.69"
},
{
"status": "affected",
"version": "2.0.70"
},
{
"status": "affected",
"version": "2.0.71"
},
{
"status": "affected",
"version": "2.0.72"
},
{
"status": "affected",
"version": "2.0.73"
},
{
"status": "affected",
"version": "2.0.74"
},
{
"status": "affected",
"version": "2.0.75"
},
{
"status": "affected",
"version": "2.0.76"
},
{
"status": "affected",
"version": "2.0.77"
},
{
"status": "affected",
"version": "2.0.78"
},
{
"status": "affected",
"version": "2.0.79"
},
{
"status": "affected",
"version": "2.0.80"
},
{
"status": "affected",
"version": "2.0.81"
},
{
"status": "affected",
"version": "2.0.82"
},
{
"status": "affected",
"version": "2.0.83"
},
{
"status": "affected",
"version": "2.0.84"
},
{
"status": "affected",
"version": "2.0.85"
},
{
"status": "affected",
"version": "2.0.86"
},
{
"status": "affected",
"version": "2.0.87"
},
{
"status": "affected",
"version": "2.1.0"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.1.2"
},
{
"status": "affected",
"version": "2.1.3"
},
{
"status": "affected",
"version": "2.1.4"
},
{
"status": "affected",
"version": "2.1.5"
},
{
"status": "affected",
"version": "2.1.6"
},
{
"status": "affected",
"version": "2.1.7"
},
{
"status": "affected",
"version": "2.1.8"
},
{
"status": "affected",
"version": "2.1.9"
},
{
"status": "affected",
"version": "2.1.10"
},
{
"status": "affected",
"version": "2.1.11"
},
{
"status": "affected",
"version": "2.1.12"
},
{
"status": "affected",
"version": "2.1.13"
},
{
"status": "affected",
"version": "2.1.14"
},
{
"status": "affected",
"version": "2.1.15"
},
{
"status": "affected",
"version": "2.1.16"
},
{
"status": "affected",
"version": "2.1.17"
},
{
"status": "affected",
"version": "2.1.18"
},
{
"status": "affected",
"version": "2.1.19"
},
{
"status": "affected",
"version": "2.1.20"
},
{
"status": "affected",
"version": "2.1.21"
},
{
"status": "affected",
"version": "2.1.22"
},
{
"status": "affected",
"version": "2.1.23"
},
{
"status": "affected",
"version": "2.1.24"
},
{
"status": "affected",
"version": "2.1.25"
},
{
"status": "affected",
"version": "2.1.26"
},
{
"status": "affected",
"version": "2.1.27"
},
{
"status": "affected",
"version": "2.1.28"
},
{
"status": "affected",
"version": "2.1.29"
},
{
"status": "affected",
"version": "2.1.30"
},
{
"status": "affected",
"version": "2.1.31"
},
{
"status": "affected",
"version": "2.1.32"
},
{
"status": "affected",
"version": "2.1.33"
},
{
"status": "affected",
"version": "2.1.34"
},
{
"status": "affected",
"version": "2.1.35"
},
{
"status": "affected",
"version": "2.1.36"
},
{
"status": "affected",
"version": "2.1.37"
},
{
"status": "affected",
"version": "2.1.38"
},
{
"status": "unaffected",
"version": "2.1.39"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "waterhunter (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peer_id results in improper access controls. It is possible to initiate the attack remotely. Upgrading to version 2.1.39 can resolve this issue. The patch is named 4e40471abc48bfc32b4b174b8844716dfc5c1471. You should upgrade the affected component."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-03T22:30:15.617Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-430300 | miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/430300"
},
{
"name": "VDB-430300 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/430300/cti"
},
{
"name": "CVE-2026-121539 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-121539"
},
{
"name": "Submit #1019996 | miroslavpejic85 MiroTalk P2P 2.0.87 Improper Access Control",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1019996"
},
{
"tags": [
"related"
],
"url": "https://github.com/waterhunter2000-svg/vulnerability-reports"
},
{
"tags": [
"patch"
],
"url": "https://github.com/miroslavpejic85/mirotalk/commit/4e40471abc48bfc32b4b174b8844716dfc5c1471"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-11-03T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-03T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-03T15:44:01.000Z",
"value": "VulDB entry last update"
}
],
"title": "miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-121539",
"datePublished": "2026-11-03T22:30:15.617Z",
"dateReserved": "2026-11-03T14:38:55.431Z",
"dateUpdated": "2026-11-07T03:36:45.712Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-121514 (GCVE-0-2026-121514)
Vulnerability from cvelistv5 – Published: 2026-11-03 20:45 – Updated: 2026-11-03 21:25
VLAI
EPSS
VEX
Title
EasySoft ZenTao PMS User model.php checkGroupChange privileges management
Summary
A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege management. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-03 21:25 UTC
Assigner
VulDB
CNA
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/430286 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/430286/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-121514 | third-party-advisory |
| https://vuldb.com/submit/1019652 | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| EasySoft | ZenTao PMS |
Affected:
22.0
Affected: 22.1 Affected: 22.2 Affected: 22.3 Affected: 22.4 Affected: 22.5 Affected: 22.6 cpe:2.3:a:easysoft:zentao_pms:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-121514",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-03T21:25:40.346360Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-03T21:25:51.030Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:easysoft:zentao_pms:*:*:*:*:*:*:*:*"
],
"modules": [
"User Module"
],
"product": "ZenTao PMS",
"vendor": "EasySoft",
"versions": [
{
"status": "affected",
"version": "22.0"
},
{
"status": "affected",
"version": "22.1"
},
{
"status": "affected",
"version": "22.2"
},
{
"status": "affected",
"version": "22.3"
},
{
"status": "affected",
"version": "22.4"
},
{
"status": "affected",
"version": "22.5"
},
{
"status": "affected",
"version": "22.6"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "benjamin_123 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege management. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-03T20:45:16.516Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-430286 | EasySoft ZenTao PMS User model.php checkGroupChange privileges management",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/430286"
},
{
"name": "VDB-430286 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/430286/cti"
},
{
"name": "CVE-2026-121514 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-121514"
},
{
"name": "Submit #1019652 | ZenTao ZenTao PMS 22.6 Privilege Escalation",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1019652"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-03T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-03T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-03T15:24:15.000Z",
"value": "VulDB entry last update"
}
],
"title": "EasySoft ZenTao PMS User model.php checkGroupChange privileges management",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-121514",
"datePublished": "2026-11-03T20:45:16.516Z",
"dateReserved": "2026-11-03T14:18:55.090Z",
"dateUpdated": "2026-11-03T21:25:51.030Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120844 (GCVE-0-2026-120844)
Vulnerability from cvelistv5 – Published: 2026-11-06 08:00 – Updated: 2026-11-06 17:34 X_Open Source
VLAI
EPSS
VEX
Title
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 7.1.3.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-06 17:34 UTC
CWE
- CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://patchstack.com/database/wordpress/plugin/… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| miniOrange | OAuth Single Sign On – SSO (OAuth Client) |
Affected:
0 , ≤ 7.1.3
(custom)
|
Date Public
2026-11-04 07:21
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-120844",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-06T17:34:26.793865Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T17:34:39.032Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "miniorange-login-with-eve-online-google-facebook",
"product": "OAuth Single Sign On \u2013 SSO (OAuth Client)",
"vendor": "miniOrange",
"versions": [
{
"changes": [
{
"at": "7.1.4",
"status": "unaffected"
}
],
"lessThanOrEqual": "7.1.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Peter Tang | Patchstack Bug Bounty Program"
}
],
"datePublic": "2026-11-04T07:21:09.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On \u2013 SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.\u003cp\u003eThis issue affects OAuth Single Sign On \u2013 SSO (OAuth Client): from n/a through 7.1.3.\u003c/p\u003e"
}
],
"value": "Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On \u2013 SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On \u2013 SSO (OAuth Client): from n/a through 7.1.3."
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "Privilege Escalation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T08:00:31.435Z",
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"shortName": "Patchstack"
},
"references": [
{
"tags": [
"vdb-entry"
],
"url": "https://patchstack.com/database/wordpress/plugin/miniorange-login-with-eve-online-google-facebook/vulnerability/wordpress-oauth-single-sign-on-sso-oauth-client-plugin-7-1-3-privilege-escalation-vulnerability?_s_id=cve"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update the WordPress OAuth Single Sign On \u2013 SSO (OAuth Client) plugin to the latest available version (at least 7.1.4)."
}
],
"value": "Update the WordPress OAuth Single Sign On \u2013 SSO (OAuth Client) plugin to the latest available version (at least 7.1.4)."
}
],
"tags": [
"x_open-source"
],
"title": "WordPress OAuth Single Sign On \u2013 SSO (OAuth Client) plugin \u003c= 7.1.3 - Privilege Escalation vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"assignerShortName": "Patchstack",
"cveId": "CVE-2026-120844",
"datePublished": "2026-11-06T08:00:31.435Z",
"dateReserved": "2026-11-03T00:24:21.837Z",
"dateUpdated": "2026-11-06T17:34:39.032Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120834 (GCVE-0-2026-120834)
Vulnerability from cvelistv5 – Published: 2026-11-09 18:09 – Updated: 2026-11-09 18:09 X_Open Source
VLAI
EPSS
VEX
Title
WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerability
Summary
Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17.
Severity
7.3 (High)
CWE
- CWE-266 - Incorrect Privilege Assignment
Assigner
Patchstack
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://patchstack.com/database/wordpress/plugin/… | vdb-entry |
Date Public
2026-11-07 17:12
{
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "wp2leads",
"product": "WP2LEADS",
"vendor": "Tobias",
"versions": [
{
"changes": [
{
"at": "3.5.18",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.5.17",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "ashv4ni | Patchstack Bug Bounty Program"
}
],
"datePublic": "2026-11-07T17:12:42.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.\u003cp\u003eThis issue affects WP2LEADS: from n/a through 3.5.17.\u003c/p\u003e"
}
],
"value": "Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17."
}
],
"impacts": [
{
"capecId": "CAPEC-233",
"descriptions": [
{
"lang": "en",
"value": "Privilege Escalation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T18:09:30.298Z",
"orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"shortName": "Patchstack"
},
"references": [
{
"tags": [
"vdb-entry"
],
"url": "https://patchstack.com/database/wordpress/plugin/wp2leads/vulnerability/wordpress-wp2leads-plugin-3-5-17-privilege-escalation-vulnerability?_s_id=cve"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update the WordPress WP2LEADS plugin to the latest available version (at least 3.5.18)."
}
],
"value": "Update the WordPress WP2LEADS plugin to the latest available version (at least 3.5.18)."
}
],
"tags": [
"x_open-source"
],
"title": "WordPress WP2LEADS plugin \u003c= 3.5.17 - Privilege Escalation vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
"assignerShortName": "Patchstack",
"cveId": "CVE-2026-120834",
"datePublished": "2026-11-09T18:09:30.298Z",
"dateReserved": "2026-11-03T00:24:21.836Z",
"dateUpdated": "2026-11-09T18:09:30.298Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Mitigation MIT-1
Architecture and Design
Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
Mitigation MIT-17
Architecture and Design
Operation
Strategy: Environment Hardening
Run your code using the lowest privileges that are required to accomplish the necessary tasks [REF-76]. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.
No CAPEC attack patterns related to this CWE.