{"uuid": "09966c5b-a308-4c0c-a6fd-b8d4fec581a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87900", "type": "seen", "source": "https://t.me/thehackernews/10141", "content": "\u203c\ufe0f  ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.\n\nA second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html", "creation_timestamp": "2026-09-23T14:26:02.000000Z"}