VULNERABILITY INTELLIGENCE
CVE-2026-67399
EPSS probability0.75%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-18
Description
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.
Weakness classification
- support@hackerone.com: CWE-502