Monthly
Local privilege escalation in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows a low-privileged local user to gain elevated privileges and, in some exploitation paths, to disrupt the service and cause denial of service. The victim must already have an authenticated local session on the affected machine (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.0); attack complexity is high, indicating a non-deterministic race or specific runtime state is required rather than a reliable one-shot trigger, and no user interaction is needed. No public exploit code has been identified at time of analysis, no CISA KEV listing is present, and no EPSS score was provided, so this should be treated as a moderate-priority local hardening issue rather than an urgent remote-exploitation emergency.
Gitea through 1.27.3 fails to revoke per-unit repository access when an organization team is demoted through the REST API, so existing team members silently keep their previous unit permissions - including write access to the team's repositories - after an owner lowers the team level (for example admin to read). The flaw is CWE-272 Incorrect Privilege Assignment: a PATCH that supplies only the permission field updates the team's access mode but never rebuilds its per-unit grants nor applies the new level as a cap, and exploitation requires an authenticated organization owner to make that API call plus a team that already holds per-unit repository permissions, with the CVSS vector (PR:L) confirming an authenticated beneficiary; the web form path is not affected. Vendor scoring is 8.1 with high confidentiality and integrity impact, while EPSS is only 0.16% (5th percentile) and no public exploit code has been identified at time of analysis; upgrading to Gitea 28.0.0 restores the intended cap behavior.
Elevation of privileges in Dell Alienware Command Center (AWCC) versions prior to 6.14.20.0 allows a low-privileged local user to gain higher system access by exploiting a Least Privilege Violation (CWE-272). The application operates with or invokes components carrying excessive privileges, which a local attacker can abuse through an interaction-dependent trigger to achieve full confidentiality, integrity, and availability impact on the affected host. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the full C:H/I:H/A:H triad indicates complete system compromise potential if the privilege boundary is crossed successfully.
Least-privilege violation across multiple TOTOLINK SOHO router models (A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10, EX200 through firmware 20260906) stems from the /etc/boa/boa.conf configuration of the Boa web-server interface, allowing a low-privileged remote actor to gain access or information beyond their intended authorization boundary. The flaw carries CVSS 4.0 base score 7.7 with high attack complexity, and VulDB rates real-world exploitation as difficult. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authenticated attackers with Manager role or higher in F5 BIG-IP can execute arbitrary commands via malicious configuration objects in iControl REST API and TMOS Shell (tmsh). This privilege escalation vulnerability allows administrators to break out of their intended access boundaries and achieve full system control. CVSS 7.2 (High) reflects network accessibility with high privileges required. No public exploit code or active exploitation confirmed at time of analysis.
This is a genuinely low-priority issue by every available signal, not a high-CVSS alarm. Local privilege retention in OpenSSH sshd-session on obsolete platforms (QNX 6, SCO OpenServer 5) allows an authenticated user to cause sshd-session to run with root privileges when GatewayPorts or StreamLocalForwarding is enabled and the host lacks support for file-descriptor passing and unprivileged PTY allocation. Exploitation is confined to those specific configurations, no public exploit has been identified at time of analysis, and the assessed CVSS is 2.9.
Least Privilege Violation in Dell Secure Connect Gateway (SCG) 5.0 allows a locally authenticated high-privileged attacker to perform unauthorized operations beyond their intended permission scope, resulting in low-impact integrity and availability degradation. Affected are both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00). No public exploit or active exploitation has been identified; the low CVSS score of 3.4 reflects the constrained attack surface requiring local, high-privileged access.
Least Privilege Violation in Dell Secure Connect Gateway 5.0 allows a locally authenticated, high-privileged attacker to perform actions beyond their authorized scope, resulting in unauthorized integrity and availability impact. Affected deployments include Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with a vendor-released patch available via Dell Security Advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in HCL IntelliOps Event Management (IEM) allows an authenticated, high-privileged attacker to access resources beyond their original authorization boundary, achieving confidentiality impact against protected data. The vulnerability is classified as CWE-272 (Least Privilege Violation) with a Changed scope in CVSS, indicating the attacker can reach resources outside their normal privilege domain within the application. No public exploit code or active exploitation has been identified at time of analysis; the EPSS signal was not provided.
Privilege escalation and denial of service in Dell Alienware Command Center (AWCC) versions prior to 6.14.20.0 are achievable by a local low-privileged attacker exploiting a link-following flaw in the application's privileged file access routines. The vulnerability allows an attacker to substitute a symbolic link or directory junction between the time AWCC resolves a filesystem path and the time it performs a privileged file operation, redirecting that operation to an arbitrary location. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog; Dell has released a patched version per advisory DSA-2026-334.
Local privilege escalation in Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 allows a low-privileged local user to gain elevated privileges and, in some exploitation paths, to disrupt the service and cause denial of service. The victim must already have an authenticated local session on the affected machine (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.0); attack complexity is high, indicating a non-deterministic race or specific runtime state is required rather than a reliable one-shot trigger, and no user interaction is needed. No public exploit code has been identified at time of analysis, no CISA KEV listing is present, and no EPSS score was provided, so this should be treated as a moderate-priority local hardening issue rather than an urgent remote-exploitation emergency.
Gitea through 1.27.3 fails to revoke per-unit repository access when an organization team is demoted through the REST API, so existing team members silently keep their previous unit permissions - including write access to the team's repositories - after an owner lowers the team level (for example admin to read). The flaw is CWE-272 Incorrect Privilege Assignment: a PATCH that supplies only the permission field updates the team's access mode but never rebuilds its per-unit grants nor applies the new level as a cap, and exploitation requires an authenticated organization owner to make that API call plus a team that already holds per-unit repository permissions, with the CVSS vector (PR:L) confirming an authenticated beneficiary; the web form path is not affected. Vendor scoring is 8.1 with high confidentiality and integrity impact, while EPSS is only 0.16% (5th percentile) and no public exploit code has been identified at time of analysis; upgrading to Gitea 28.0.0 restores the intended cap behavior.
Elevation of privileges in Dell Alienware Command Center (AWCC) versions prior to 6.14.20.0 allows a low-privileged local user to gain higher system access by exploiting a Least Privilege Violation (CWE-272). The application operates with or invokes components carrying excessive privileges, which a local attacker can abuse through an interaction-dependent trigger to achieve full confidentiality, integrity, and availability impact on the affected host. No public exploit code or CISA KEV listing has been identified at time of analysis; however, the full C:H/I:H/A:H triad indicates complete system compromise potential if the privilege boundary is crossed successfully.
Least-privilege violation across multiple TOTOLINK SOHO router models (A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10, EX200 through firmware 20260906) stems from the /etc/boa/boa.conf configuration of the Boa web-server interface, allowing a low-privileged remote actor to gain access or information beyond their intended authorization boundary. The flaw carries CVSS 4.0 base score 7.7 with high attack complexity, and VulDB rates real-world exploitation as difficult. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authenticated attackers with Manager role or higher in F5 BIG-IP can execute arbitrary commands via malicious configuration objects in iControl REST API and TMOS Shell (tmsh). This privilege escalation vulnerability allows administrators to break out of their intended access boundaries and achieve full system control. CVSS 7.2 (High) reflects network accessibility with high privileges required. No public exploit code or active exploitation confirmed at time of analysis.
This is a genuinely low-priority issue by every available signal, not a high-CVSS alarm. Local privilege retention in OpenSSH sshd-session on obsolete platforms (QNX 6, SCO OpenServer 5) allows an authenticated user to cause sshd-session to run with root privileges when GatewayPorts or StreamLocalForwarding is enabled and the host lacks support for file-descriptor passing and unprivileged PTY allocation. Exploitation is confined to those specific configurations, no public exploit has been identified at time of analysis, and the assessed CVSS is 2.9.
Least Privilege Violation in Dell Secure Connect Gateway (SCG) 5.0 allows a locally authenticated high-privileged attacker to perform unauthorized operations beyond their intended permission scope, resulting in low-impact integrity and availability degradation. Affected are both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00). No public exploit or active exploitation has been identified; the low CVSS score of 3.4 reflects the constrained attack surface requiring local, high-privileged access.
Least Privilege Violation in Dell Secure Connect Gateway 5.0 allows a locally authenticated, high-privileged attacker to perform actions beyond their authorized scope, resulting in unauthorized integrity and availability impact. Affected deployments include Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00, with a vendor-released patch available via Dell Security Advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Privilege escalation in HCL IntelliOps Event Management (IEM) allows an authenticated, high-privileged attacker to access resources beyond their original authorization boundary, achieving confidentiality impact against protected data. The vulnerability is classified as CWE-272 (Least Privilege Violation) with a Changed scope in CVSS, indicating the attacker can reach resources outside their normal privilege domain within the application. No public exploit code or active exploitation has been identified at time of analysis; the EPSS signal was not provided.
Privilege escalation and denial of service in Dell Alienware Command Center (AWCC) versions prior to 6.14.20.0 are achievable by a local low-privileged attacker exploiting a link-following flaw in the application's privileged file access routines. The vulnerability allows an attacker to substitute a symbolic link or directory junction between the time AWCC resolves a filesystem path and the time it performs a privileged file operation, redirecting that operation to an arbitrary location. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog; Dell has released a patched version per advisory DSA-2026-334.