On this page

CWE-269: Improper Privilege Management

Weakness Summary

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

  • Canonical source: MITRE CWE-269
  • Published Atomicorp CVE observations: 30
  • Distinct affected products in those observations: 28
  • Active Atomicorp rules associated with this weakness: 61

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2026-45632Dokploy: Schedule Authorization Bypass Enables Host/Server Command ExecutiondokployProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-64637All Plesk Versions below 18.0.79.5 Reseller Privilege Escalation to RootPleskProtected by Atomicorp rules341245 , 344366
CVE-2017-11467OrientDB 2.2.x Remote Code ExecutionorientdbProtected by Atomicorp rules340095
CVE-2017-12635CouchDB Enum UtilitycouchdbProtected by Atomicorp rules341245 , 391213 , 392301
CVE-2017-5689Intel Active Management Technology - System Privilegesproliant ml10 gen9 server firmwareProtected by Atomicorp rules390726 , 392647
CVE-2018-12596Ektron CMS 9.20 SP2 - Improper Access Restrictionsektron cmsProtected by Atomicorp rules390727 , 392301 , 392648
CVE-2020-3243Cisco UCS Director Cloupia Script RCEucs directorProtected by Atomicorp rules340006 , 340007 , 344360 , 344370 , 347009 , 390719
CVE-2020-3250Cisco UCS Director Cloupia Script RCEucs directorProtected by Atomicorp rules340006 , 340007 , 344360 , 344370 , 347009 , 390719
CVE-2021-34621WordPress ProfilePress 3.0.0-3.1.3 - Admin User Creation WeaknessprofilepressDetected by Atomicorp rules377360
CVE-2022-24637Open Web Analytics 1.7.3 - Remote Code Execution (RCE)open web analyticsProtected by Atomicorp rules340128 , 360152 , 380018 , 390801
CVE-2026-104798My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'aMy Calendar – Accessible Event ManagerProtected by Atomicorp rules340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 , 393655
CVE-2026-1492WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege EscalationUser Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login BuilderProtected by Atomicorp rules300020
CVE-2026-37107HTMLy v.3.1.1 Improper Privilege Management Vulnerability-Protected by Atomicorp rules337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022
CVE-2026-49819UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmdUpSnapProtected by Atomicorp rules340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-11423Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege EscalationAltium Enterprise ServerProtected by Atomicorp rules344360 , 390709
CVE-2026-40484ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore FunctionCRMProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2017-5254Cambium ePMP 1000 Account Password Resetepmp 1000 firmwareProtected by Atomicorp rules340362
CVE-2019-25066Ajenti auth username Command InjectionajentiProtected by Atomicorp rules344364 , 344366
CVE-2022-3405Acronis Cyber Protect/Backup machine info disclosurecyber backupProtected by Atomicorp rules340011 , 340128 , 380018 , 390801
CVE-2026-7467Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalationexpand-makerDetected by Atomicorp rules377360
CVE-2026-76801FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege EscalationFireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart AbandonmentProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-72830Grav API Plugin before 1.0.13 RCE via ConfigController scope bypassgravProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2026-73664FreePBX: Authenticated Arbitrary SSH Key Injection via Backup ModulebackupProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2020-16875Microsoft Exchange Server DlpUtils AddTenantDlpPolicy RCEexchange serverProtected by Atomicorp rules330791 , 340152
CVE-2023-0872OpenNMS Horizon Authenticated RCEhorizonProtected by Atomicorp rules330791 , 340152
CVE-2019-9624Webmin Upload Authenticated RCEwebminProtected by Atomicorp rules330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390801
CVE-2020-8655EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command ExecutioneyesofnetworkProtected by Atomicorp rules340013 , 340016 , 340017 , 340145 , 340156 , 340157 , 340159 , 340181 , 341145 , 341245 , 344363 , 360147 , 360148
CVE-2026-101860RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges managementraspap-webguiProtected by Atomicorp rules340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655
CVE-2019-19699Centreon Poller Authenticated Remote Command ExecutioncentreonProtected by Atomicorp rules390501 , 390709
CVE-2017-6339Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilitiesinterscan web security virtual applianceProtected by Atomicorp rules314150 , 330791 , 340147 , 340148 , 340152 , 342259 , 345493 , 346755 , 350148 , 390724

Associated Atomicorp WAF Rules

RuleStatusBehavior
300020Activedisruptive (deny)
314150Activedisruptive (deny)
330791Activedisruptive (deny)
334168Activedisruptive (deny)
337109Activedisruptive (deny)
337110Activedisruptive (deny)
340006Activedisruptive (deny)
340007Activedisruptive (deny)
340011Activedisruptive (deny)
340013Activedisruptive (deny)
340014Activedisruptive (deny)
340016Activedisruptive (deny)
340017Activedisruptive (deny)
340023Activedisruptive (deny)
340029Activedisruptive (deny)
340095Activedisruptive (deny)
340128Activedisruptive (deny)
340145Activedisruptive (deny)
340147Activedisruptive (deny)
340148Activedisruptive (deny)
340152Activedisruptive (deny)
340156Activedisruptive (deny)
340157Activedisruptive (deny)
340159Activedisruptive (deny)
340162Activedisruptive (deny)
340163Activedisruptive (deny)
340181Activedisruptive (deny)
340193Activedisruptive (deny)
340362Activedisruptive (deny)
341145Activedisruptive (deny)
341245Activedisruptive (deny)
342259Activedisruptive (deny)
344360Activedisruptive (deny)
344361Activedisruptive (deny)
344363Activedisruptive (deny)
344364Activedisruptive (deny)
344366Activedisruptive (deny)
344370Activedisruptive (deny)
345493Activenon-disruptive (pass)
346755Activedisruptive (deny)
347009Activedisruptive (deny)
350148Activedisruptive (deny)
360147Activedisruptive (deny)
360148Activedisruptive (deny)
360152Activedisruptive (deny)
377360Activenon-disruptive (pass)
380018Activedisruptive (deny)
390501Activedisruptive (deny)
390709Activedisruptive (deny)
390719Activedisruptive (deny)
390724Activedisruptive (deny)
390726Activedisruptive (deny)
390727Activedisruptive (deny)
390801Activedisruptive (deny)
391213Activedisruptive (deny)
392301Activedisruptive (deny)
392647Activedisruptive (deny)
392648Activedisruptive (deny)
393655Activedisruptive (deny)
398021Activedisruptive (deny)
398022Activedisruptive (deny)

MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:

CAPEC-122 , CAPEC-233 , CAPEC-58