CVE-2026-68490

creationtimestamp| type| source ---|---|--- 2026-09-24 06:46:11+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mwanucmp572x...

CVE-2026-68490

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts...

CVE-2026-68490

A flaw in the CalDAV and CardDAV services of cPanel & WHM allows a local user to read sensitive calendar events and contacts belonging to other accounts due to incorrect permission assignments. This issue affects cPanel & WHM version 120 and later . Remediation is available in versions 11.134.0.5...

CVE-2026-68490

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts...