CWE-250
Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
We have discovered 110 live websites that are affected by CWE-250.
CVEs
- Count - 3
CWE References
Website Distribution by Country
Number of websites using CWE-250 United States | 43 websites |
 Germany | 9 websites |
 India | 7 websites |
 Brazil | 6 websites |
 Italy | 6 websites |
 Turkey | 6 websites |
 Netherlands | 5 websites |
 Mexico | 3 websites |
 China | 2 websites |
 Ethiopia | 2 websites |
Website Distribution by TLD
Number of websites using CWE-250| .com | 43 websites |
| .net | 8 websites |
| .org | 4 websites |
| .it | 4 websites |
| .com.br | 3 websites |
| .de | 3 websites |
| .nl | 2 websites |
| .com.cn | 2 websites |
| .edu | 2 websites |
| .ch | 1 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-250| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Sep, 2026 | CVE-2026-72654 | Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure | 37 |
| Apr, 2026 | CVE-2026-4498 | Execution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope | 25 |
| Sep, 2025 | CVE-2025-42958 | Missing Authentication check in SAP NetWeaver | 73 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-250| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Sep, 2025 | CVE-2025-42958 | Missing Authentication check in SAP NetWeaver | 73 |
| Sep, 2026 | CVE-2026-72654 | Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure | 37 |
| Apr, 2026 | CVE-2026-4498 | Execution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope | 25 |
Websites affected by CWE-250
Top websites that are affected by CWE-250. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *******.*******.com | United States | ***,*** | |
| ****.***.mx | Mexico | ***,*** | |
| ************.********.**.ca |  Canada | *,***,*** | |
| ***.***.*********.gov | United States | *,***,*** | |
| ********.******.net | Brazil | *,***,*** | |
| ***.****.******.net | United States | *,***,*** | |
| **************.***.*********.gov | United States | *,***,*** | |
| *******.net |  Czech Republic | *,***,*** | |
| *****.net | Brazil | *,***,*** | |
| ********.com |  Singapore | *,***,*** |