High severityNVD Advisory· Published Sep 23, 2026· Updated Sep 24, 2026
CVE-2026-68490
CVE-2026-68490
Description
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
3- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- New Cpanel Vulnerability Allows Attackers to Access Other Users’ AccountsCyber Security News · Sep 23, 2026
- New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server ControlThe Hacker News · Sep 23, 2026