CVE-2026-111627

🗓️ 16 Oct 2026 17:39:02Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

Authorization bypass in HestiaCP allows non-ROOT_USER admins to impersonate ROOT_USER.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-111627	16 Oct 202618:04	–	circl
CNNVD	HestiaCP Authorization Issue Vulnerability	15 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-111627 HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation	16 Oct 202617:39	–	cvelist
EUVD	EUVD-2026-103049	16 Oct 202617:39	–	euvd
Mend	CVE-2026-111627	16 Oct 202617:39	–	mend
NVD	CVE-2026-111627	16 Oct 202618:17	–	nvd
Positive Technologies	PT-2026-116026	16 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-111627: Incorrect Authorization	16 Oct 202600:00	–	rapid7
RedhatCVE	CVE-2026-111627	5 Nov 202620:00	–	redhatcve
Vulnrichment	CVE-2026-111627 HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation	16 Oct 202617:39	–	vulnrichment

Vulners

Node

hestiacp hestiacpRange<1.10.5

[
  {
    "vendor": "hestiacp",
    "product": "hestiacp",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.10.5",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "packageURL": "pkg:github/hestiacp/hestiacp",
    "repo": "https://github.com/hestiacp/hestiacp"
  }
]

Source	Link
github	www.github.com/hestiacp/hestiacp/security/advisories/GHSA-vp7q-fjv5-5vg8
github	www.github.com/hestiacp/hestiacp/commit/1af7e057cd5ad2ea945acba6c9932ea1a1802c24
vulncheck	www.vulncheck.com/advisories/hestiacp-before-1.10.5-protected-admin-bypass-via-cron-job-creation
github	www.github.com/hestiacp/hestiacp/releases/tag/1.10.5
github	www.github.com/hestiacp/hestiacp/blob/1.10.4/web/add/cron/index.php
github	www.github.com/hestiacp/hestiacp/blob/1.10.4/web/inc/policies.php

Parameter	Position	Path	Description	CWE
loginas	request body	/add/cron/	Authorization bypass via the 'loginas' parameter allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_USER account.	CWE-863

16 Oct 2026 20:17Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.2

CVSS 48.6

EPSS0.00574

SSVC

CWE-863