Veille CVE

Septembre 2026

5 CVE

Critique 3 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WebPros cPanel » ✕
  1. CVE-2026-87900 9.4 Critique

    WebPros WP Toolkit for cPanel

    Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

  2. CVE-2026-87899 9.4 Critique

    WebPros cPanel

    Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

  3. CVE-2026-68490 8.2 Élevée

    WebPros cPanel

    Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

  4. CVE-2026-67401 9.9 Critique

    WebPros cPanel

    A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

  5. CVE-2026-65643 8.8 Élevée

    WebPros cPanel · Cpanel cpanel

    Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.