CVE-2026-87900
Description
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts.
Is your site exposed to CVE-2026-87900?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
References
Other References
Frequently Asked Questions
What is CVE-2026-87900? +
How do I check if I'm vulnerable to CVE-2026-87900? +
Related Vulnerabilities
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle …
Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of `escapeshellcmd()` in `/components/codegit/traits/execute.php` allows …
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A …
Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/core/git/gitCommand.ts execGitShallowClone passes the --remote-branch value directly …
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution …
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations …