LiteSpeed Enterprise

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 23, 2026
Last mentionedSep 23, 2026

Timeline

1 articles · newest first

New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts

cPanel patched a root privilege escalation and cross-tenant flaws in calendars, contacts, and WordPress databases.

Cyber Security NewsSep 23, 15:18 UTC · Sep 23, 2026VulnerabilityCVE-2026-68490 CVE-2026-87899 CVE-2026-87900+34 · 2 reads

Related CVEs

by mentions

CVE-2026-67401<1%9.9
Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
published Sep 9, 2026cPanel (WebPros) cPanelPoC ×5
CVE-2026-878999.4
Authenticated Privilege Escalation to Root RCE in cPanel & WHM
published Sep 23, 2026cPanel, L.L.C. cPanel & WHM
CVE-2026-879009.4
Argument Injection in WP Toolkit for cPanel Allows Cross-Account File Read and RCE
published Sep 23, 2026Plesk / WebPros (WP Toolkit) WP Toolkit for cPanel
CVE-2026-656389.2
Unauthenticated shell command injection in ConfigServer Security & Firewall (CSF)
published Sep 10, 2026ConfigServer Security & Firewall (CSF)
CVE-2026-65643<1%8.7
Authenticated eval injection in cPanel enables root code execution
published Sep 1, 2026cPanel
CVE-2026-684908.2
CalDAV/CardDAV Permission Flaw in cPanel Lets Local Users Read Other Accounts' Data
published Sep 23, 2026cPanel (cPanel, L.L.C. / WebPros) cPanel & WHM (CalDAV/CardDAV calendar and contacts service)

Appears with

LiteSpeedvendor · 1
ConfigServervendor · 1
WP Toolkitproduct · 1
WP Squaredproduct · 1
cPanelorganization · 1
ConfigServer Security & Firewallproduct · 1
WHMproduct · 1
cPanelproduct · 1
cPanelvendor · 1

Entities are extracted by the model from each article. First seen Sep 23, 2026, last mentioned Sep 23, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.