CVE-2026-68490

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

Published Sep 23, 2026
CVSS 8.2 high
0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

WebPros cPanel

In the news

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats The Hacker News · Sep 28, 2026
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control The Hacker News · Sep 23, 2026

CVE-2026-68490 at the National Vulnerability Database