CWE-266

CWE-266 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-266, highest CVSS first.

  1. CRITICAL 9.1CVE-2026-100592026-08-05

    A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant ad…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8CVE-2026-734612026-09-16

    On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-…

    AI risk analysis on Exploit-DB.ai →

  3. LOW 2.2CVE-2026-18817public PoC2026-08-04

    A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/users/serializers.py of the component Inactive Non-Staff User Handler. Performing…

    AI risk analysis on Exploit-DB.ai →