CVE-2026-68490CWE-732

CVE-2026-68490

published September 24, 2026

CVSS
8.2
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
8.2 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-09-24T00:17Z
References (1)
https://support.cpanel.net/hc/en-us/articles/43502940099991 · [email protected]
EPSS history
Timeline
  • 25 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 23 SEP 19:52Z
    Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts
    cvelistv5