{"schemaVersion":1,"id":"CVE-2026-108390","requestedId":"CVE-2026-108390","aliases":[],"status":"published","rawState":"Received","rawSeverityStatus":"Received","duplicateOf":null,"indexable":true,"title":null,"description":"Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in func/main.sh does not escape single quotes when writing a custom document-root value to a user's web.conf file, allowing a low-privileged authenticated panel user with a web domain to inject an additional PATH field. When the user invokes the ordinary Search feature, the root-privileged v-search-user-object script loads the forged field through parse_object_kv_list_non_eval(), which permits reserved shell-variable names and globally replaces PATH before invoking column without an absolute path. By placing a malicious column executable in the injected search path, the user can execute arbitrary code as root. This residual vulnerability was introduced when version 1.9.7 replaced the raw eval sink addressed by CVE-2026-84984 with parse_object_kv_list_non_eval(), and it is fixed in version 1.10.5.","dates":{"published":"2026-10-14T17:17:24.180Z","modified":"2026-10-14T17:54:41.782Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"cve.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"cve.org","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"nvd","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","evidence":[]},"exploits":[],"exploitCount":0,"exploitSources":[],"weaknesses":[{"id":"CWE-88","name":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","description":"The product constructs a string for a command to be executed by a separate component\nin another control sphere, but it does not properly delimit the\nintended arguments, options, or switches within that command string.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/88.html","capec":[{"id":"CAPEC-137","name":"Parameter Injection","url":"https://capec.mitre.org/data/definitions/137.html"},{"id":"CAPEC-174","name":"Flash Parameter Injection","url":"https://capec.mitre.org/data/definitions/174.html"},{"id":"CAPEC-41","name":"Using Meta-characters in E-mail Headers to Inject Malicious Payloads","url":"https://capec.mitre.org/data/definitions/41.html"},{"id":"CAPEC-460","name":"HTTP Parameter Pollution (HPP)","url":"https://capec.mitre.org/data/definitions/460.html"},{"id":"CAPEC-88","name":"OS Command Injection","url":"https://capec.mitre.org/data/definitions/88.html"}],"techniques":[],"countermeasures":[]},{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html","capec":[{"id":"CAPEC-242","name":"Code Injection","url":"https://capec.mitre.org/data/definitions/242.html"},{"id":"CAPEC-35","name":"Leverage Executable Code in Non-Executable Files","url":"https://capec.mitre.org/data/definitions/35.html"},{"id":"CAPEC-77","name":"Manipulating User-Controlled Variables","url":"https://capec.mitre.org/data/definitions/77.html"}],"techniques":[{"id":"T1027.006","name":"HTML Smuggling","url":"https://attack.mitre.org/techniques/T1027/006/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1027.009","name":"Embedded Payloads","url":"https://attack.mitre.org/techniques/T1027/009/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1564.009","name":"Resource Forking","url":"https://attack.mitre.org/techniques/T1564/009/","tactics":[{"id":"TA0005","name":"Stealth"}]}],"countermeasures":[{"id":"D3-FFV","name":"File Format Verification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-FFV/"}]},{"id":"CWE-427","name":"Uncontrolled Search Path Element","description":"The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/427.html","capec":[{"id":"CAPEC-38","name":"Leveraging/Manipulating Configuration File Search Paths","url":"https://capec.mitre.org/data/definitions/38.html"},{"id":"CAPEC-471","name":"Search Order Hijacking","url":"https://capec.mitre.org/data/definitions/471.html"}],"techniques":[{"id":"T1574.001","name":"DLL","url":"https://attack.mitre.org/techniques/T1574/001/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}]},{"id":"T1574.004","name":"Dylib Hijacking","url":"https://attack.mitre.org/techniques/T1574/004/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}]},{"id":"T1574.007","name":"Path Interception by PATH Environment Variable","url":"https://attack.mitre.org/techniques/T1574/007/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}]},{"id":"T1574.008","name":"Path Interception by Search Order Hijacking","url":"https://attack.mitre.org/techniques/T1574/008/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}]},{"id":"T1574.009","name":"Path Interception by Unquoted Path","url":"https://attack.mitre.org/techniques/T1574/009/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}]}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]}],"ttp":{"capecs":[{"id":"CAPEC-137","name":"Parameter Injection","url":"https://capec.mitre.org/data/definitions/137.html","weaknessIds":["CWE-88"],"techniqueIds":[]},{"id":"CAPEC-174","name":"Flash Parameter Injection","url":"https://capec.mitre.org/data/definitions/174.html","weaknessIds":["CWE-88"],"techniqueIds":[]},{"id":"CAPEC-242","name":"Code Injection","url":"https://capec.mitre.org/data/definitions/242.html","weaknessIds":["CWE-94"],"techniqueIds":[]},{"id":"CAPEC-35","name":"Leverage Executable Code in Non-Executable Files","url":"https://capec.mitre.org/data/definitions/35.html","weaknessIds":["CWE-94"],"techniqueIds":["T1027.006","T1027.009","T1564.009"]},{"id":"CAPEC-38","name":"Leveraging/Manipulating Configuration File Search Paths","url":"https://capec.mitre.org/data/definitions/38.html","weaknessIds":["CWE-427"],"techniqueIds":["T1574.007","T1574.009"]},{"id":"CAPEC-41","name":"Using Meta-characters in E-mail Headers to Inject Malicious Payloads","url":"https://capec.mitre.org/data/definitions/41.html","weaknessIds":["CWE-88"],"techniqueIds":[]},{"id":"CAPEC-460","name":"HTTP Parameter Pollution (HPP)","url":"https://capec.mitre.org/data/definitions/460.html","weaknessIds":["CWE-88"],"techniqueIds":[]},{"id":"CAPEC-471","name":"Search Order Hijacking","url":"https://capec.mitre.org/data/definitions/471.html","weaknessIds":["CWE-427"],"techniqueIds":["T1574.001","T1574.004","T1574.008"]},{"id":"CAPEC-77","name":"Manipulating User-Controlled Variables","url":"https://capec.mitre.org/data/definitions/77.html","weaknessIds":["CWE-94"],"techniqueIds":[]},{"id":"CAPEC-88","name":"OS Command Injection","url":"https://capec.mitre.org/data/definitions/88.html","weaknessIds":["CWE-88"],"techniqueIds":[]}],"techniques":[{"id":"T1027.006","name":"HTML Smuggling","url":"https://attack.mitre.org/techniques/T1027/006/","weaknessIds":["CWE-94"],"capecIds":["CAPEC-35"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[]},{"id":"T1027.009","name":"Embedded Payloads","url":"https://attack.mitre.org/techniques/T1027/009/","weaknessIds":["CWE-94"],"capecIds":["CAPEC-35"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[]},{"id":"T1564.009","name":"Resource Forking","url":"https://attack.mitre.org/techniques/T1564/009/","weaknessIds":["CWE-94"],"capecIds":["CAPEC-35"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[{"id":"D3-FFV","name":"File Format Verification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-FFV/"}]},{"id":"T1574.001","name":"DLL","url":"https://attack.mitre.org/techniques/T1574/001/","weaknessIds":["CWE-427"],"capecIds":["CAPEC-471"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"id":"T1574.004","name":"Dylib Hijacking","url":"https://attack.mitre.org/techniques/T1574/004/","weaknessIds":["CWE-427"],"capecIds":["CAPEC-471"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"id":"T1574.007","name":"Path Interception by PATH Environment Variable","url":"https://attack.mitre.org/techniques/T1574/007/","weaknessIds":["CWE-427"],"capecIds":["CAPEC-38"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"id":"T1574.008","name":"Path Interception by Search Order Hijacking","url":"https://attack.mitre.org/techniques/T1574/008/","weaknessIds":["CWE-427"],"capecIds":["CAPEC-471"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"id":"T1574.009","name":"Path Interception by Unquoted Path","url":"https://attack.mitre.org/techniques/T1574/009/","weaknessIds":["CWE-427"],"capecIds":["CAPEC-38"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0104","name":"Execution"}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]}],"countermeasures":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FFV","name":"File Format Verification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-FFV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}],"countermeasuresByTactic":[{"tactic":"Harden","items":[{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"}]},{"tactic":"Detect","items":[{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"}]},{"tactic":"Isolate","items":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-FFV","name":"File Format Verification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-FFV/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"tactic":"Evict","items":[{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"}]},{"tactic":"Restore","items":[{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"}]},{"tactic":"Deceive","items":[{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"}]}]},"affected":[{"vendor":"hestiacp","product":"hestiacp","name":"hestiacp","label":"hestiacp","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"source":null,"versions":[{"text":"≥ 1.9.7, < 1.10.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.9.7, < 1.10.5","eol":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/hestiacp/hestiacp/security/advisories/GHSA-r9q4-pmcm-5qqf","label":"github.com/hestiacp/hestiacp/security/advisories/GHSA-r9q4-pmcm-5qqf","hostname":"github.com","tags":["X Refsource CONFIRM"],"sources":["cve.org","nvd"]},{"url":"https://github.com/hestiacp/hestiacp/commit/4d86018660f35a1d64a0ae819bc5ee700949a287","label":"github.com/hestiacp/hestiacp/commit/4d86018660f35a1d64a0ae819bc5ee700949a287","hostname":"github.com","tags":["X Refsource MISC"],"sources":["cve.org","nvd"]},{"url":"https://ravindulakmina.pages.dev/advisories/cve-2026-108390-hestiacp-apostrophe-to-root","label":"ravindulakmina.pages.dev/advisories/cve-2026-108390-hestiacp-apostrophe-to-root","hostname":"ravindulakmina.pages.dev","tags":["X Refsource MISC"],"sources":["cve.org","nvd"]}],"droppedReferenceCount":0,"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-14T17:17:24.180Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T17:54:41.782Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"default","profileName":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10},"appliedRules":["high-cvss-alone"]},"warnings":[],"meta":{"dataAsOf":"2026-10-14T20:34:44.688Z","stale":false,"partial":false}}