cPanel CalDAV/CardDAV Flaw Lets Local Users Access Other Accounts’ Contacts and Calendars

cPanel has released security updates for CVE-2026-68490, a permissions vulnerability in its CalDAV and CardDAV functionality that could allow a local user on a shared server to read calendar events and contact information belonging to other hosting accounts. The flaw affects cPanel & WHM version 120 and later, making prompt patching important... Weiterlesen