CVE-2026-12196
2026-07-04
12h16 +00:00
12h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP management scripts with passwordless sudo. This could result in the takeover of administrator users in the application and the underlying webserver.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
