CWE-266

Everything BlueTeam Herald has reported about CWE-266: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Secure Frontend Dashboard Instances Affected by CVE-2026-107424 Privilege Escalation Flaw

A critical vulnerability in Frontend Dashboard versions through 3.0.7 allows attackers to escalate privileges, requiring immediate inventory and containment of exposed instances.

Oct 14, 2026

Vulnerabilities

Apply Vendor Patch for Sergey AIWU v1.5.9 to Fix CVSS 9.8 Sub Priv Escalation

A CVSS 9.8 flaw allows subscribers to gain unauthorized privileges in Sergey AIWU versions 1.5.9 and below, requiring immediate vendor patches.

Oct 11, 2026