Vulnerabilities
SAP MII Flaw Allows Admins to Escalate Privileges on Java Server
A critical vulnerability in SAP Manufacturing Integration and Intelligence lets administrators gain full control of the underlying Java application server.
Privilege Escalation
Everything Threat Times has reported about Privilege Escalation: 12 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
IBM Db2 Mirror for i Faces Critical Privilege Escalation Flaw
A critical vulnerability in IBM Db2 Mirror for i allows authenticated attackers to bypass checks and execute code with elevated privileges.
Vulnerabilities
LG webOS Exploit Chain Allows Pre-Auth Root Command Execution
Researchers disclosed a vulnerability chain in LG’s smart TV operating system that enables unauthorized remote command execution with root privileges.
Vulnerabilities
Critical Privilege Escalation Flaw Found in Sergey AIWU Versions Up to 1.5.9
The National Vulnerability Database lists CVE-2026-39801 as a critical severity issue allowing subscriber privilege escalation in AIWU software.
Vulnerabilities
Tonda Membership Plugin Has Critical Unauthenticated Privilege Escalation Flaw
The National Vulnerability Database rates CVE-2026-62022 as critical due to an unauthenticated privilege escalation issue in versions up to 1.0.1.
Vulnerabilities
Critical Privilege Escalation Flaw Found in miniOrange OTP Verification Plugin
The NVD assigned a CVSS score of 9.8 to CVE-2026-106610, a critical vulnerability allowing privilege escalation in miniOrange OTP verification versions up to 5.5.7.
Vulnerabilities
Critical Privilege Escalation Flaw Found in Blocksy Companion WordPress Plugin
Unauthenticated attackers can exploit CVE-2026-107645 to escalate privileges to seller accounts in vulnerable Blocksy Companion versions.
Vulnerabilities
AWS Addresses Dirty Frag and Other Kernel Vulnerabilities in Amazon Linux
Amazon Web Services has released security bulletins addressing multiple kernel flaws, including the high-severity Dirty Frag issue, in its Linux distributions.
Vulnerabilities
SonicWall and Splunk Patch Critical and High-Severity Vulnerabilities
SonicWall and Splunk have released patches for critical and high-severity flaws that allow authentication bypasses and arbitrary code execution.
Vulnerabilities
Apache Camel Karavan Patch Fixes High-Severity Kubernetes Privilege Escalation
A critical input validation flaw in Apache Camel Karavan allowed authenticated users to deploy arbitrary, privileged Kubernetes resources until version 4.22.1.
Vulnerabilities
Microsoft patches critical Azure SRE Agent privilege escalation flaw
A missing authorization check in the Azure SRE Agent allows network-based privilege escalation, rated critical by NVD.
Vulnerabilities
Cisco Releases Patches for Dozen Critical Vulnerabilities Enabling Remote Code Execution
Cisco has issued fixes for twelve critical security flaws that could allow attackers to execute code remotely or escalate privileges on affected systems.