CVE-2026-111627highCWE-863

CVE-2026-111627: fallo de gravedad alta en hestiacp

HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation

Publicada el

Seguir esta CVE+ Monitorear hestiacp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.6epss 0.6%
HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_USER account. Attackers can log in via the loginas parameter and POST to /add/cron/, because the read-only flag is never checked, causing crond to run their commands as the protected administrator's system account.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
hestiacp · hestiacp
CVEs relacionadas — hestiacp

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-30007HIGHHestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record ManagementEPSS 3.2%CVE-2026-43633CRITICALHestiaCP 1.9.0-1.9.4 Deserialization RCE via Web TerminalEPSS 1.1%CVE-2026-108390CRITICALHestiaCP Low-Privileged User to Root via Config-Field Injection and PATH HijackingEPSS 0.7%CVE-2026-12196HIGHHestiaCP Admin TakeoverEPSS 0.4%CVE-2025-30008MEDIUMHestiaCP < 1.9.5 Stored XSS via DNS Record Management InterfaceEPSS 0.3%CVE-2026-43634HIGHHestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP HeaderEPSS 0.2%