Privilege Escalation

(4 articles)

June 1, 2026

WP Maps Pro Flaw Exploited to Create Admin Accounts

A critical WP Maps Pro vulnerability is being actively exploited to create unauthorized admin accounts. Learn how it works and how to protect your site now.

May 16, 2026

Azure Backup AKS Privilege Escalation: No CVE Issued

Microsoft rejected a critical Azure Backup for AKS privilege escalation report. No CVE was issued, but the attack path silently stopped working in May 2026.

April 22, 2026

ASP.NET Core CVE-2026-40372 Privilege Escalation Patched

Microsoft patches CVE-2026-40372, a critical privilege escalation flaw in ASP.NET Core. Learn how it works and how to protect your apps now.

April 22, 2026

ASP.NET Core CVE-2026-40372: Emergency Patch Released

Microsoft patches critical ASP.NET Core Data Protection flaw CVE-2026-40372. Attackers can forge auth cookies and gain SYSTEM privileges. Update now.