<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: hestiacp</title><description>Every new CVE for hestiacp.</description><link>https://agentprime.io/</link><item><title>CVE-2026-111627: HestiaCP before 1.10.5 Protected Admin Bypass via Cron Job Creation</title><link>https://agentprime.io/advisories/CVE-2026-111627/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111627/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 17:39:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-108390: HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking</title><link>https://agentprime.io/advisories/CVE-2026-108390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108390/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 17:17:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-30008: HestiaCP &lt; 1.9.5 Stored XSS via DNS Record Management Interface</title><link>https://agentprime.io/advisories/CVE-2025-30008/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-30008/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 17:51:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-30007: HestiaCP &lt; 1.9.5 Authenticated OS Command Injection via DNS Record Management</title><link>https://agentprime.io/advisories/CVE-2025-30007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-30007/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 17:50:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12196: HestiaCP Admin Takeover</title><link>https://agentprime.io/advisories/CVE-2026-12196/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12196/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 04 Jul 2026 12:05:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43634: HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header</title><link>https://agentprime.io/advisories/CVE-2026-43634/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43634/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:33:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43633: HestiaCP 1.9.0-1.9.4 Deserialization RCE via Web Terminal</title><link>https://agentprime.io/advisories/CVE-2026-43633/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43633/</guid><description>CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:29:55 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>