[ Vendor · 2 CVEs ]

hestiacp

CVEs affecting hestiacp published in the last 30 days, plus any hestiacp CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-111627 16 Oct 2026 CVSS 7.2 hestiacpHestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while…
CVE-2026-108390 14 Oct 2026 CVSS 9.9 hestiacpHestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in…