CVE-2026-113551

HighCVSS 8.8/10Last modified Nov 13, 2026

Description

Audition is affected by a Violation of Secure Design Principles vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-657

Affected software

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1135537.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-1135557.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-1135578.6Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curreCVE-2026-1135588.6Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curreCVE-2026-113564.4The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magnCVE-2026-1135607.7Audition is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the currentCVE-2026-1135627.7Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curreCVE-2026-1135638.6Audition is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context oCVE-2026-1135657.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-1135677.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-1135695.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attackerCVE-2026-113574.3The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all v
CVE-2026-113551: High severity, CVSS 8.8 | Vulnix