CVE-2026-111627 — HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation
HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_US…
Published: 2026-10-16 · CVSS: 8.6 · CVSS 4.0
HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_USER account. Attackers can log in via the loginas parameter and POST to /add/cron/, because the read-only flag is never checked, causing crond to run their commands as the protected administrator's system account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7