cPanel CalDAV and CardDAV vulnerbility - no NVD score yet

mikhomikho AdministratorOG Bash Me Gently
in Security

An authenticated cPanel account holder can escalate their privileges through cPanel's CalDAV and CardDAV functionality.

Affected Product Versions

Product Affected Versions Patched Versions
cPanel/WHM v120 or later
11.134.0.57 or later
11.136.0.41 or later
11.138.0.8 or later
WP2: 11.138.1.11 or later

Impact

Successful exploitation leads to code execution as the root user, giving an attacker full control of the server.

https://support.cpanel.net/hc/en-us/articles/43591715125271-Security-CVE-2026-87899-Vulnerability-in-cPanel-s-CalDAV-CardDAV-September-22-2026

Meet Nix and Bruce @ https://twobirdsonelesbox.com
My project/stuff page @ https://serveraddict.net

Tagged:
Sign In or Register to comment.