AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2026-106608.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 7.2CVSS 3.1 · audit@patchstack.com
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSReceivedModified Oct 10, 2026

Disclosure summary

Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2.

Source-reported weakness categories

CWE-266

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

CVEProject/cvelistV5 releases · RSS-2b11a7e1dade072c26c14342ed52b8ffeb8

Open original source · Updated Oct 10, 2026

CVE 2026-10-10_2300Z

CVE mention in publisher metadata; check the original affected versions.

CVEProject/cvelistV5 releases · RSS-f946067cb6a34653c12f3a7d3e105773b0f

Open original source · Updated Oct 10, 2026

CVE 2026-10-10_2200Z

CVE mention in publisher metadata; check the original affected versions.

CVEProject/cvelistV5 releases · RSS-7c1aa4e02ee105026a9d5ef835739da2231

Open original source · Updated Oct 10, 2026

CVE 2026-10-10_2100Z

CVE mention in publisher metadata; check the original affected versions.

CVEProject/cvelistV5 releases · RSS-5daad76275e9590636f1bfed69854f874d0

Open original source · Updated Oct 10, 2026

CVE 2026-10-10_2000Z

CVE mention in publisher metadata; check the original affected versions.

CVEProject/cvelistV5 releases · RSS-f5a41e504aba4034d4f99f9de25577fb6a1

Open original source · Updated Oct 10, 2026

CVE 2026-10-10_1900Z

CVE mention in publisher metadata; check the original affected versions.

CVEProject/cvelistV5 releases · RSS-f5dee9e139662097b84b17b3e74d5544c25

Open original source · Updated Oct 10, 2026

CVE 2026-10-10_1800Z

CVE mention in publisher metadata; check the original affected versions.

NIST National Vulnerability Database · NVD-CVE-2026-106608

Open original source · Updated Oct 10, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

Original records & references

PUBLISHED 2026-10-10T13:17:00-04:00
MODIFIED 2026-10-10T13:17:00-04:00
INGESTED 2026-10-10T20:55:17-04:00