Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-68490

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WebPros cPanel

  • 11.120.0.0 to < 11.134.0.57affected
  • 11.136.0.0 to < 11.136.0.41affected
  • 11.138.0.0 to < 11.138.0.8affected
  • 11.134.0.57 to < 11.134.0.57unaffected
  • 11.136.0.41 to < 11.136.0.41unaffected
  • 11.138.0.8 to < 11.138.0.8unaffected

References