CVE-2026-68490

Summary

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

Affected Software

VendorProductVersion RangeStatus
WebProscPanel11.120.0.0 < 11.134.0.57affected
WebProscPanel11.136.0.0 < 11.136.0.41affected
WebProscPanel11.138.0.0 < 11.138.0.8affected
WebProscPanel11.134.0.57 < 11.134.0.57unaffected
WebProscPanel11.136.0.41 < 11.136.0.41unaffected
WebProscPanel11.138.0.8 < 11.138.0.8unaffected

Weaknesses

  • CWE-732: CWE-732 Incorrect Permission Assignment for Critical Resource

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References