Topic

Privilege Escalation: news, advisories and analysis

52 articlesUpdated 26 Oct 2026

CyberSecureToday covers Privilege Escalation across 52 articles published between 10 Sep 2026 and 26 Oct 2026. The coverage includes 47 vulnerability advisories and 5 analysis or guidance pieces. 47 advisories are rated critical or high severity, and 10 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Privilege Escalation most often intersect with Cloud Security, IAM and Active Exploitation, with Technology, Cloud & SaaS the most affected sector. The most recent story, “The Datawiza Proxy Auth Plugin WordPress plugin b Privilege Escalation Flaw Disclosed”, was published 26 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
The Datawiza Proxy Auth Plugin WordPress plugin b Privilege Escalation Flaw Disclosed
CVE-2026-115214 in The Datawiza Proxy Auth Plugin WordPress plugin b (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor26 Oct 202610 min read
ThreatsCloud & SaaSCritical
Hallo Initialization of a Resource with an Insecure Defa Privilege Escalation Flaw Disclosed
CVE-2026-25784 in Hallo Initialization of a Resource with an Insecure Defa (Privilege Escalation) allows remote attackers to trigger arbitrary code executi
Aisha Noor23 Oct 202610 min read
ThreatsCloud & SaaSCritical
A Kubernetes tenant with create permission on Consol Privilege Escalation Flaw Disclosed
CVE-2026-105312 in A Kubernetes tenant with create permission on Consol (Privilege Escalation) allows remote attackers to trigger arbitrary code execution.
Aisha Noor20 Oct 202610 min read
ThreatsBanking & FintechHigh
MariaDB DROP PACKAGE Defect Leaves Orphaned Grants in mysql.procs_priv Enabling Privilege Escalation
A catalog cleanup omission in MariaDB's PL/SQL package engine left orphaned grants in mysql.procs_priv, allowing low-privilege users to hijack administrative packages.
CST Editorial Desk18 Oct 202613 min read
ThreatsCloud & SaaSHigh
RubyGems Flaw in Gem Transfer Flow Allowed Organization Admins to Hijack Owner Rights and Evict Founders
A missing authorization boundary in RubyGems.org's gem transfer workflow enabled organization admins to invite attacker-controlled owners and evict founders.
Daniel Okafor18 Oct 202611 min read
ThreatsCloud & SaaSCritical
WhaTicket Community Privilege Escalation Flaw Disclosed
CVE-2026-111708 in WhaTicket Community (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rel
Aisha Noor18 Oct 202610 min read
ThreatsCloud & SaaSCritical
Microsoft Patches Maximum-Severity CVSS 10.0 Privilege Escalation Flaw CVE-2026-96207 in Partner Center Cloud Service
Microsoft resolves a maximum-severity privilege escalation flaw (CVE-2026-96207, CVSS 10.0) in Partner Center that exposed delegated customer tenants to unauthorized administrative control.
CST Editorial Desk17 Oct 20268 min read
ThreatsCloud & SaaSHigh
SimpleForm WordPress Plugin Flaw Lets Visitors Register as Admin
WordPress security advisory resolves a high-severity privilege escalation flaw in SimpleForm (CVE-2026-104748) allowing unauthenticated users to register as admin.
Priya Raman14 Oct 20268 min read
ThreatsCloud & SaaSHigh
Apache Airflow FAB Provider Flaw Lets OAuth Users Escalate to Admin
Apache Airflow releases security fix for CVE-2026-75156 in the Flask-AppBuilder provider, patching an OAuth2 role-mapping flaw leading to admin privilege escalation.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSHigh
Google Cloud Run & Artifact Registry Privilege Escalation Flaw CVE-2026-79696 Patched
Google Cloud resolves a high-severity privilege escalation flaw in Cloud Run and Artifact Registry auth helpers (CVE-2026-79696) exposing service account tokens.
Priya Raman14 Oct 20268 min read
ThreatsCloud & SaaSHigh
Azure Arc Connected Machine Agent Local Privilege Escalation Flaw CVE-2026-83711 Enables Host Compromise
Microsoft addresses a critical privilege escalation flaw in Azure Arc Connected Machine Agent (CVE-2026-83711) exposing Hybrid Instance Metadata Service tokens.
Aisha Noor13 Oct 20268 min read
NewsCloud & SaaSCritical
AWS IAM Identity Center SAML Canonicalization Flaw Enables Cross-Account Administrative Role Assumption (CVE-2026-78520)
AWS patches a critical vulnerability in IAM Identity Center (CVE-2026-78520) allowing manipulated SAML XML comments to bypass role assignment boundaries.
CST Editorial Desk13 Oct 20268 min read
ThreatsCloud & SaaSCritical
AWS Lambda MicroVM Isolation Flaw Exposed STS Session Keys Across Invocations
AWS issues advisory CVE-2026-71215 for Lambda Custom Runtimes, addressing a Firecracker microVM memory reclamation flaw that exposed ephemeral STS tokens.
CST Editorial Desk11 Oct 20268 min read
ThreatsCloud & SaaSCritical
Google Cloud Workload Identity Flaw Enabled Cross-Organization Service Account Impersonation
Google fixes critical flaw CVE-2026-69210 in Cloud IAM Workload Identity Federation where improper validation of OIDC audience claims allowed cross-tenant service account hijacking.
CST Editorial Desk11 Oct 20268 min read
ThreatsIndustrial & OTHigh
AVEVA System Platform InTouch OPC Server Local Privilege Escalation Enables Industrial Operator Workstation Compromise (CVE-2026-54890)
AVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.
CST Editorial Desk8 Oct 20268 min read
ThreatsCloud & SaaSHigh
Oracle Cloud Infrastructure Compute Instance Agent Flaw Enables Local Daemon Privilege Escalation (CVE-2026-52410)
Oracle Security alerts document a local privilege escalation flaw in the OCI Compute Instance Agent service allowing standard guest tenants to gain unconstrained host execution.
CST Editorial Desk8 Oct 20268 min read
ThreatsCloud & SaaSCritical
Zammad Helpdesk Exploit Chain Pairs Session Fixation With Root Escalation for Takeover
Attackers are weaponizing an exploit chain in Zammad helpdesk combining session fixation (CVE-2026-102489) with root privilege escalation (CVE-2026-102490).
Daniel Okafor5 Oct 20268 min read
ThreatsIndustrial & OTHigh
ABB PCM600 Substation Automation Manager Flaws Permit Local SYSTEM Privilege Escalation and Archive Traversal (CVE-2026-15952)
CISA advisory ICSA-26-274-03 reveals local SYSTEM privilege escalation and project archive path traversal in ABB Protection and Control IED Manager PCM600.
Mei-Lin Chen2 Oct 20268 min read
ThreatsCloud & SaaSCritical
Internet2 Grouper Access Management Rule Engine Flaw Allows Unauthorized Privilege Escalation (CVE-2026-103470)
A privilege escalation vulnerability in Internet2 Grouper before v7.5.1 allows authenticated users with rule editing rights to elevate to full system administrator.
Priya Raman1 Oct 202611 min read
InsightsCloud & SaaS
The Lethal Trifecta in Enterprise AI Agents: Why Input Filters Fail Against Tool Hijacking
An architectural analysis of the Lethal Trifecta in autonomous enterprise AI agents: untrusted input, autonomous execution, and access to privileged external tools.
CST Editorial Desk30 Sep 202611 min read
ThreatsCloud & SaaSHigh
Azure Monitor Agent Untrusted Search Path Flaw Enables Local Privilege Escalation CVE-2026-42830
Microsoft MSRC bulletin details an untrusted search path vulnerability in Azure Monitor Agent Metrics Extension allowing low-privileged users to attain SYSTEM privileges.
Aisha Noor27 Sep 20268 min read
ThreatsCloud & SaaSCritical
Microsoft Entra ID Assumed-Immutable Data Modification Flaw Enables Tenant Privilege Escalation CVE-2026-50481
A critical vulnerability in Microsoft Entra ID allows authenticated users to manipulate assumed-immutable directory attributes and achieve Global Admin rights.
Aisha Noor27 Sep 20269 min read
ThreatsCloud & SaaSHigh
Google Cloud Integration Connectors Authorization Flaw Enables Service Account Privilege Escalation CVE-2026-4644
Google Cloud Bulletin GCP-2026-059 details missing authorization flaw CVE-2026-4644 in Integration Connectors enabling project-level privilege escalation.
Mei-Lin Chen26 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Editorial Desk26 Sep 202614 min read