← CVE Intelligence

CVE-2026-68490

WebPros / cPanel PUBLISHED

Description (CNA)

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

Affected (CNA)

Vendor / productVersions
WebPros / cPanelaffected 11.120.0.0 before 11.134.0.57; affected 11.136.0.0 before 11.136.0.41; affected 11.138.0.0 before 11.138.0.8; unaffected 11.134.0.57 before 11.134.0.57; unaffected 11.136.0.41 before 11.136.0.41; unaffected 11.138.0.8 before 11.138.0.8

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.