CVE-2026-47365: CVE-2026-47365: güvenlik açığı

Açıklama (NVD)

Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass cross-tenant authorization and execute arbitrary wp-toolkit CLI commands as another account.

Özet bilgiler

CVSS v3.1

9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,41 (yüzdelik 35)

CWE

CWE-88

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• support.cpanel.net
• CWE-88