CVE-2026-107424
9.8 CRITICALPublished 2026-10-14 · Updated 2026-10-14
AI risk analysis
- Summary
- This vulnerability allows attackers to escalate privileges within the Frontend Dashboard application by incorrectly assigning user permissions, potentially leading to full system compromise. The flaw enables unauthorized users to gain elevated access that they shouldn't have.
- Exploitability
- Exploitation is likely straightforward with no special preconditions required, as the vulnerability directly affects privilege assignment logic without requiring complex attack chains or specific user interactions.
- Blast radius
- If exploited, this could allow attackers to gain full administrative access to the dashboard and potentially compromise the entire application environment, affecting all users and data managed through the system.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to version 3.0.8 or later to address the privilege assignment vulnerability.
privilege-escalationaccess-controlweb-application
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-266
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-108628PoC
- CRITICALCVE-2026-39801
- HIGHCVE-2026-94178
- HIGHCVE-2024-58390PoC
- HIGHCVE-2026-102860
- HIGHCVE-2026-103504PoC
- HIGHCVE-2026-104766
- HIGHCVE-2026-105267PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.