CVE-2026-87900

Vulnerability Description

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

Related Weaknesses (CWE)

CWE-88

References

https://support.cpanel.net/hc/en-us/articles/43597969409943

FAQ

What is CVE-2026-87900?

CVE-2026-87900 is a documented vulnerability. Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.

How severe is CVE-2026-87900?

CVSS scoring is not yet available for CVE-2026-87900. Check NVD for updates.

Is there a patch for CVE-2026-87900?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.