gcdRadar
tags/Attack types

privilege-escalation

5 live · 36 on record · last incident 1 day ago

Dec ’25records per month, by first reportNov ’26

Live5

  1. live7.8
    Check Point Gateway CVE-2026-123039: Check Point Gateway Exploited in Destructive Attacks

    Patch now · Exploited · Patched · since 13 Nov 2026 · CVE-2026-123039

    Attackers exploited PHP2Shell for initial compromise alongside CVE-2026-123039 to elevate privileges to root on Check Point Gateways. The targeted attacks resulted in destructive gateway impacts.

    Do:Apply the emergency hotfixes provided by the vendor immediately.

  2. live9.8
    Windows New Windows SignDrop zero‑day gives hackers SYSTEM privileges

    Patch now · Disclosed · No patch yet · since 12 Nov 2026 · updated 13 Nov 2026

    A new Windows zero‑day, named SignDrop, was disclosed that allows attackers to obtain SYSTEM privileges through a signature‑validation flaw. The vulnerability is unpatched and rated critical.

    Do:Monitor for signs of SignDrop exploitation and apply mitigations.

  3. live9.6
    Zoom Workplace CVE-2026-108186: Zoom Workplace Critical Privilege Escalation Flaw

    Patch now · Disclosed · Patched · since 11 Nov 2026 · CVE-2026-108186

    Zoom patched a critical improper input validation flaw in Zoom Workplace for Windows that allowed unauthenticated remote privilege escalation. The vendor released software updates to address the vulnerability.

    Do:Update to the latest Zoom Workplace version.

  4. live9.8
    IBM Aspera Faspex CVE-2026-123218: IBM Aspera Faspex Incorrect Authorization Vulnerability

    Patch now · Exploited · Partly patched · since 9 Nov 2026 · updated 10 Nov 2026 · CVE-2026-123218

    IBM Aspera Faspex contains an incorrect authorization flaw allowing authenticated users to craft specific messages and escalate privileges. CISA added the vulnerability to its KEV catalog following confirmation of active exploitation.

    Do:Apply mitigations or updates in accordance with vendor instructions and CISA guidance.

  5. live
    Fragnesia Linux CISA warns of exploited Fragnesia Linux privilege escalation flaw

    Patch now · Exploited · No patch yet · since 29 Oct 2026

    CISA issued a warning regarding a high-severity Linux kernel privilege escalation vulnerability being actively chained in the wild with PHP2Shell flaws. Federal agencies have been instructed to apply patches.

    Do:Patch the affected Linux kernel components as advised by CISA.

Earlier31

  1. closed9.8
    Azure OpenAI CVE-2026-119990: Missing authentication in Azure OpenAI

    Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-119990

    AI
  2. closed
    PHP2Shell China-Nexus Attack Using PHP2Shell Breaches U.S. Government-Affiliated Network

    Breaches & attacks · Exploited · since 25 Oct 2026

  3. closed
    Tailscale SSH Tailscale SSH flaw allows root access expansion from compromised devices

    Research · since 25 Oct 2026 · updated 28 Oct 2026

  4. closed7.7
    Azure AI Foundry CVE-2026-108456: Server-side request forgery in Azure AI Foundry

    Patch now · Disclosed · since 22 Oct 2026 · CVE-2026-108456

    AI
  5. closed9.9
    LiteLLM CVE-2026-114612: LiteLLM vulnerable to privilege escalation via cryptographic context reuse

    Patch now · Disclosed · Patched · since 22 Oct 2026 · updated 27 Oct 2026 · CVE-2026-114612

    AI
  6. closed7.8
    Windows AI CVE-2026-69923: Windows AI local elevation of privilege vulnerability

    Patch now · Disclosed · since 13 Oct 2026 · CVE-2026-69923

    AI
  7. closed7.6
    Open WebUI CVE-2026-109572: Open WebUI terminal proxy privilege escalation vulnerability

    Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109572

    AI
  8. closed9.6
    Azure SRE Agent Azure SRE Agent Elevation of Privilege Vulnerability

    Patch now · Disclosed · since 8 Oct 2026 · CVE-2026-69435

    AI
  9. closed7.5
    Azure AI Foundry CVE-2026-85917: Server-side request forgery in Azure AI Foundry

    Patch now · Disclosed · since 17 Sep 2026 · CVE-2026-85917

    AI
  10. closed10.0
    Azure AI Foundry CVE-2026-85889: Missing authentication vulnerability in Azure AI Foundry

    Patch now · Disclosed · since 17 Sep 2026 · CVE-2026-85889

    AI
  11. closed9.3
    Copilot Studio CVE-2026-80098: Cryptographic signature verification flaw in Microsoft Copilot Studio

    Patch now · Disclosed · since 3 Sep 2026 · CVE-2026-80098

    AI
  12. closed9.9
    Langflow CVE-2026-19295: Command execution vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-19295

    AI
  13. closed9.9
    Langflow CVE-2026-8635: IBM Langflow OSS authentication bypass and privilege escalation

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8635

    AI
  14. closed8.1
    Microsoft 365 Copilot CVE-2026-58617: Privilege escalation vulnerability in Microsoft 365 Copilot

    Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-58617

    AI
  15. closed5.4
    Open WebUI CVE-2026-59212: Open WebUI model meta.knowledge file access escalation

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59212

    AI
  16. closed9.9
    Azure OpenAI CVE-2026-45499: Server-side request forgery in Azure OpenAI

    Patch now · Disclosed · since 2 Jul 2026 · CVE-2026-45499

    AI
  17. closed9.9
    Langflow CVE-2026-10561: Langflow Unsandboxed PythonREPLComponent Execution

    Patch now · Disclosed · since 6 Oct 2026 · updated 6 Oct 2026 · CVE-2026-10561

    AI
  18. closed6.1
    MCP servers & tools CVE-2026-47250: mcp-server-kubernetes Privilege Escalation Vulnerability

    Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-47250

    AI
  19. closed8.8
    LiteLLM LiteLLM API Key Generation Flaw Allows Unauthorized Route Access

    Patch now · Disclosed · since 21 May 2026 · CVE-2026-47101

    AI
  20. closed8.8
    LiteLLM LiteLLM User Role Update Vulnerability Enables Privilege Escalation

    Patch now · Disclosed · since 21 May 2026 · CVE-2026-47102

    AI
  21. closed8.6
    Azure AI Foundry CVE-2026-35435: Improper access control in Azure AI Foundry M365 published agents

    Patch now · Disclosed · since 7 May 2026 · CVE-2026-35435

    AI
  22. closed7.3
    Claude Code + SDKs CVE-2026-35603: Claude Code Insecure Configuration Loading LPE

    Patch now · Disclosed · since 17 Apr 2026 · CVE-2026-35603

    AI
  23. closed9.8
    LoLLMs CVE-2026-1114: LoLLMs Weak JWT Secret Key Access Control Flaw

    Patch now · Disclosed · since 7 Apr 2026 · CVE-2026-1114

    AI
  24. closed10.0
    Azure AI Foundry CVE-2026-32213: Improper authorization vulnerability in Azure AI Foundry

    Patch now · Disclosed · since 3 Apr 2026 · CVE-2026-32213

    AI
  25. closed8.7
    LiteLLM CVE-2026-35029: LiteLLM proxy configuration endpoint privilege escalation

    Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-35029

    AI
  26. closed3.8
    AnythingLLM CVE-2026-32715: AnythingLLM Privilege Escalation and Credential Exposure

    Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32715

    AI
  27. closed8.0
    GitHub Copilot CVE-2026-21257: Privilege Escalation via Command Injection in GitHub Copilot

    Patch now · Disclosed · since 10 Feb 2026 · CVE-2026-21257

    AI
  28. closed8.8
    Langflow CVE-2025-57760: Langflow Privilege Escalation via CLI

    Patch now · Disclosed · since 25 Aug 2025 · CVE-2025-57760

    AI
  29. closed8.1
    LiteLLM CVE-2025-0628: LiteLLM Improper Authorization and Privilege Escalation

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0628

    AI
  30. closed9.3
    Copilot Studio CVE-2024-49038: XSS vulnerability in Microsoft Copilot Studio

    Patch now · Disclosed · since 26 Nov 2024 · CVE-2024-49038

    AI
  31. closed8.8
    Langflow CVE-2024-7297: Privilege escalation vulnerability in Langflow

    Patch now · Disclosed · since 30 Jul 2024 · CVE-2024-7297

    AI