Veille CVE

Mercredi 23 septembre 2026

3 CVE

Critique 2 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WebPros cPanel » ✕
  1. CVE-2026-87900 9.4 Critique

    WebPros WP Toolkit for cPanel

    Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

  2. CVE-2026-87899 9.4 Critique

    WebPros cPanel

    Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

  3. CVE-2026-68490 8.2 Élevée

    WebPros cPanel

    Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.