CVE-2026-32561High· 8.8▾ TwilightSubscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108923Medium· 6.3A vulnerability was determined in 1024-lab smart-admin up to 3.30.0
CVE-2026-108899High· 7.3A flaw has been found in tobychui zoraxy up to 3.3.4
CVE-2026-21756High· 7.2HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.
CVE-2026-32558Critical· 9.8Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
CVE-2026-28165Critical· 9.8Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
CVE-2026-108890Medium· 6.3A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0