← Back to search

CVE-2026-107424

9.8 CRITICAL

Published 2026-10-14 · Updated 2026-10-14

AI risk analysis

Summary
This vulnerability allows attackers to escalate privileges within the Frontend Dashboard application by incorrectly assigning user permissions, potentially leading to full system compromise. The flaw enables unauthorized users to gain elevated access that they shouldn't have.
Exploitability
Exploitation is likely straightforward with no special preconditions required, as the vulnerability directly affects privilege assignment logic without requiring complex attack chains or specific user interactions.
Blast radius
If exploited, this could allow attackers to gain full administrative access to the dashboard and potentially compromise the entire application environment, affecting all users and data managed through the system.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to version 3.0.8 or later to address the privilege assignment vulnerability.
privilege-escalationaccess-controlweb-application

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-266

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.