CWE-266 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-266 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-48172LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exp…17.9%심각10.0CVE-2026-105284A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the…0.8%심각9.3CVE-2026-116368A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown…0.6%보통6.9CVE-2026-78330Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings fo…0.6%심각9.8CVE-2026-108899A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of t…0.6%보통5.5CVE-2026-93961A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the funct…0.6%보통6.9CVE-2026-94036A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. Th…0.6%높음7.4CVE-2026-90565A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9…0.5%보통5.5
전체 목록
120건
CVE-2026-90523A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d…0.5%보통5.5
CVE-2026-59241A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V…0.5%높음8.7
CVE-2026-108890A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue i…0.5%낮음2.1
CVE-2026-106610Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verifica…0.5%심각9.8
CVE-2026-112025A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c…0.5%보통5.5
CVE-2026-60010Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to at…0.5%보통6.5
CVE-2026-109605A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the …0.5%보통5.5
CVE-2026-73814Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository coll…0.5%미평가
CVE-2026-101860A vulnerability was found in RaspAP raspap-webgui up to 3.5.5. Affected by this issue is the function PluginIn…0.5%높음7.4
CVE-2026-90566A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77…0.5%보통5.5
CVE-2026-48197Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enha…0.5%높음7.2
CVE-2026-100883A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the fi…0.5%낮음2.1
CVE-2026-85400Backend administrators without system maintainer privileges were able to schedule any of the configuration:rea…0.4%높음7.5
CVE-2026-93968A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file bac…0.4%보통5.1
CVE-2026-119599AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign…0.4%보통5.3
CVE-2026-73804Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owne…0.4%미평가
CVE-2026-94047A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the func…0.4%낮음2.1
CVE-2026-114361A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gate…0.4%보통6.3
CVE-2026-105445An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature all…0.4%심각9.4
CVE-2026-90787A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Af…0.4%보통5.5
CVE-2026-120224A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_b…0.4%높음8.6
CVE-2026-86153A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEn…0.4%심각9.4
CVE-2026-86830Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solu…0.4%높음8.6
CVE-2026-107424Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows …0.4%심각9.8
CVE-2026-86804A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the functi…0.4%보통6.9
CVE-2026-113507A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the fil…0.4%보통5.5
CVE-2026-114245A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda…0.4%보통5.5
CVE-2026-94048A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function …0.4%낮음2.0
CVE-2026-91930Flowise before 3.1.4 fails to scope enterprise organization and workspace membership APIs to the caller's tena…0.4%높음7.7
CVE-2026-90520A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293b…0.4%낮음2.1
CVE-2026-90507A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affe…0.4%낮음2.1
CVE-2026-116386Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.0.3%심각9.8
CVE-2026-108825A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed …0.4%낮음2.1
CVE-2026-116106A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability i…0.3%보통6.9
CVE-2026-93504A vulnerability has been found in SveltyCMS 0.0.6. This affects an unknown part of the file src/routes/api/[..…0.4%보통5.3
CVE-2026-116223A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file …0.3%보통5.5
CVE-2026-95719An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an au…0.3%보통4.9
CVE-2026-108923A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unkn…0.4%낮음2.1
CVE-2026-112407Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 throu…0.3%높음8.7
CVE-2026-101053A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the fil…0.4%보통5.5
CVE-2026-39775Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.0.3%높음8.8
CVE-2026-62106Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.0.3%높음8.8
CVE-2026-86583The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all ve…0.3%높음8.8
CVE-2026-100619Capgo (capgo.app) blocks direct user inserts into the public.manifest table with a RESTRICTIVE row-level secur…0.3%높음8.7
CVE-2026-112242Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Es…0.3%높음8.8
CVE-2026-73461On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authen…0.3%심각9.4
CVE-2026-104757Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.0.3%높음7.2
CVE-2026-114249A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84…0.3%보통5.5
CVE-2026-103532A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAcce…0.3%보통6.9
CVE-2026-108812A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of…0.3%보통5.5
CVE-2026-90856A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This…0.3%보통5.5
CVE-2026-94178Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.0.3%높음7.5
CVE-2026-86275A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. …0.3%보통5.5
CVE-2026-96627Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUs…0.3%높음8.8
CVE-2026-105070Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.0.3%높음8.8
CVE-2026-90499A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.upda…0.3%낮음2.1
CVE-2026-86212A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the componen…0.3%낮음2.1
CVE-2026-109693Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Esca…0.3%높음8.8
CVE-2026-105382A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f6…0.3%보통5.5
CVE-2026-101054A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file…0.3%보통5.5
CVE-2026-96882A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is t…0.3%보통5.5
CVE-2026-96881A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks o…0.3%보통5.5
CVE-2026-96880A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the…0.3%보통5.5
CVE-2026-85241A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV…0.3%보통5.3
CVE-2026-96341Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.Thi…0.3%높음8.2
CVE-2026-105571A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the fil…0.3%보통5.5
CVE-2026-110898Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-fo…0.3%보통6.4
CVE-2026-102293A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.a…0.3%보통5.5
CVE-2026-110373Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number a…0.3%높음8.1
CVE-2026-97324A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function u…0.3%보통5.5
CVE-2026-96556A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier…0.3%보통5.5
CVE-2026-102129A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled …0.3%높음7.2
CVE-2026-85514A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of t…0.3%낮음2.1
CVE-2026-97895A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file pac…0.3%낮음2.1
CVE-2026-110372Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalat…0.3%심각9.8
CVE-2026-109892Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-e…0.3%심각9.8
CVE-2026-109694Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Esca…0.3%심각9.8
CVE-2026-116108A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_…0.3%낮음2.1
CVE-2026-102674Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior …0.3%높음8.2
CVE-2026-102851Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security featur…0.3%보통6.1
CVE-2026-85401A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown …0.3%낮음2.1
CVE-2026-85513A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_a…0.2%낮음2.1
CVE-2026-106608Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation…0.3%높음7.2
CVE-2026-103470In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in t…0.3%심각9.3
CVE-2026-96763A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue af…0.2%낮음2.1
CVE-2026-86482In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation0.2%높음8.8
CVE-2026-86516A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an u…0.2%보통5.1
CVE-2026-105611A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the…0.2%낮음2.0
CVE-2026-112045A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory o…0.2%낮음2.1
CVE-2026-95594Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.0.2%높음8.1
CVE-2026-120185A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend…0.2%보통5.1
CVE-2026-86228A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function e…0.2%낮음2.1
CVE-2026-103068Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions.0.2%높음8.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.