CVE-2026-12196Disclosure

LOWCVSS 8.3 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP management scripts with passwordless sudo. This could result in the takeover of administrator users in the application and the underlying webserver.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-12196 HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP mana… https://www.cve.org/CVERecord?id=CVE-2026-12196 ----- Traducción: CVE-2026-12196 El … http://infoflow.cloud`
Post summary
The post announces a broken access control flaw in HestiaCP’s cronjob feature that allows low‑privilege users to alter scheduled scripts. No exploit, patch, or active exploitation evidence is provided.
0000030
91 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-12196 HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaCP mana… https://www.cve.org/CVERecord?id=CVE-2026-12196
Post summary
CVE‑2026‑12196 is a broken access control vulnerability in HestiaCP’s cronjob feature, allowing low‑privilege users to modify cronjobs and run arbitrary scripts; no patch, exploit, or active exploitation details are provided.
00000748
57.7K followersView on X

Explore more

Back to dashboard