CVE-2026-111627

A flaw was found in HestiaCP. This authorization bypass allows an authenticated administrator to perform unauthorized write operations while impersonating the protected root administrator account. Because the application fails to verify read-only restrictions during scheduled task creation, an...