hxxps://wp-toolkit.plesk[.]com/cPanel/installer.shURL
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control“WP Toolkit (CVE-2026-87900): update to version 6.11.3 or later with this command: bash <(curl hxxps://wp-toolkit.plesk[.]com/cPanel/installer.sh || wget -O - hxxps://wp-toolkit.plesk.com/cPanel/installer.sh) --version 6.11.3”
Indicators reported together
named in the same reports- 11.134.0[.]57in 1 report
- 11.136.0[.]41in 1 report
- 11.138.0[.]8in 1 report
- 11.138.1[.]11in 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-87899, CVE-2026-87900, CVE-2026-68490
Thanks — we review every report.