privilege escalation

Everything Patch Herald has reported about privilege escalation: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

9.8 CVSS Score: Frontend Dashboard 3.0.7 Has Critical Privilege Escalation Vulnerability

A critical vulnerability in the Frontend Dashboard plugin allows privilege escalation. The flaw affects versions through 3.0.7. No fix status is provided.

Oct 14, 2026

Vulnerabilities

CVSS 9.8: Tonda Membership 1.0.1 CWE-266 Flaw Enables Unauthenticated Full Control

A CVSS 9.8 critical vulnerability in Tonda Membership versions 1.0.1 and below lets attackers gain full control without logging in.

Oct 11, 2026