CWE-264
CWE-264 · 10 records · 0 with a public proof-of-concept
Records the NVD classes under CWE-264, highest CVSS first.
- CRITICAL 9.9CVE-2026-96012
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this…
- HIGH 7.1CVE-2026-101176
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- MEDIUM 6.5CVE-2026-76488
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must ha…
- MEDIUM 6.3CVE-2026-116367
A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the att…
- MEDIUM 6.3CVE-2026-101102
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, …
- MEDIUM 6.2CVE-2026-101172
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
- MEDIUM 5.5CVE-2026-101184
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.
- MEDIUM 5.3CVE-2026-108788
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attac…
- LOW 3.7CVE-2026-101177
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- LOW 3.6CVE-2026-101171
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.