Veille CVE

Mercredi 23 septembre 2026

2 CVE sur 3

  1. CVE-2026-87900 9.4 Critique

    WebPros WP Toolkit for cPanel

    Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

  2. CVE-2026-87899 9.4 Critique

    WebPros cPanel

    Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.