[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-67402":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-04T03:50:50.655Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":498,"aliases":499,"duplicate_of":9,"upstream":500,"downstream":501,"duplicates":502,"related":503,"reserved_at":9,"published_at":504,"modified_at":504,"state":505,"summary":506,"references_raw":513,"kevs":519,"epss":9,"epss_history":520,"metrics":521,"affected":528},"CVE-2026-67402","An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerability affects installations where CSF Messenger v3 and its HTTPS mode are enabled. WebPros addressed the vulnerability in version 16.31.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-552","Files or Directories Accessible to External Parties","The product makes files or directories accessible to unauthorized actors, even though they should not be.","weakness","Draft","Base",[19,328],{"id":20,"name":21,"techniques":22},"CAPEC-150","Collect Data from Common Resource Locations",[23,230,260,278,284,322],{"id":24,"name":25,"tactics":26,"countermeasures":30},"T1003","OS Credential Dumping",[27],{"id":28,"name":29},"TA0031","Credential Access",[31,36,41,45,50,54,59,63,67,71,75,79,83,87,91,95,99,103,108,113,117,121,125,130,134,138,142,146,150,154,158,162,166,170,174,178,182,186,190,194,198,202,206,210,214,218,222,226],{"id":32,"name":33,"tactic":34},"D3-WSAM","Web Session Access Mediation",{"name":35},"Isolate",{"id":37,"name":38,"tactic":39},"D3-FIM","File Integrity Monitoring",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":46,"name":47,"tactic":48},"D3-FE","File Encryption",{"name":49},"Harden",{"id":51,"name":52,"tactic":53},"D3-SCF","System Call Filtering",{"name":35},{"id":55,"name":56,"tactic":57},"D3-DUC","Decoy User Credential",{"name":58},"Deceive",{"id":60,"name":61,"tactic":62},"D3-KBPI","Kernel-based Process Isolation",{"name":35},{"id":64,"name":65,"tactic":66},"D3-CRO","Credential Rotation",{"name":49},{"id":68,"name":69,"tactic":70},"D3-MFA","Multi-factor Authentication",{"name":49},{"id":72,"name":73,"tactic":74},"D3-CF","Content Filtering",{"name":35},{"id":76,"name":77,"tactic":78},"D3-LFP","Local File Permissions",{"name":35},{"id":80,"name":81,"tactic":82},"D3-HBPI","Hardware-based Process Isolation",{"name":35},{"id":84,"name":85,"tactic":86},"D3-RFAM","Remote File Access Mediation",{"name":35},{"id":88,"name":89,"tactic":90},"D3-ABPI","Application-based Process Isolation",{"name":35},{"id":92,"name":93,"tactic":94},"D3-DF","Decoy File",{"name":58},{"id":96,"name":97,"tactic":98},"D3-CQ","Content Quarantine",{"name":35},{"id":100,"name":101,"tactic":102},"D3-CM","Content Modification",{"name":35},{"id":104,"name":105,"tactic":106},"D3-RD","Restore Database",{"name":107},"Restore",{"id":109,"name":110,"tactic":111},"D3-FEV","File Eviction",{"name":112},"Evict",{"id":114,"name":115,"tactic":116},"D3-SFA","System File Analysis",{"name":40},{"id":118,"name":119,"tactic":120},"D3-ANCI","Authentication Cache Invalidation",{"name":112},{"id":122,"name":123,"tactic":124},"D3-NTF","Network Traffic Filtering",{"name":35},{"id":126,"name":127,"tactic":128},"D3-DI","Data Inventory",{"name":129},"Model",{"id":131,"name":132,"tactic":133},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":135,"name":136,"tactic":137},"D3-PLA","Process Lineage Analysis",{"name":40},{"id":139,"name":140,"tactic":141},"D3-PSA","Process Spawn Analysis",{"name":40},{"id":143,"name":144,"tactic":145},"D3-HS","Host Shutdown",{"name":112},{"id":147,"name":148,"tactic":149},"D3-CTS","Credential Transmission Scoping",{"name":35},{"id":151,"name":152,"tactic":153},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},{"id":155,"name":156,"tactic":157},"D3-RF","Restore File",{"name":107},{"id":159,"name":160,"tactic":161},"D3-PT","Process Termination",{"name":112},{"id":163,"name":164,"tactic":165},"D3-CAA","Connection Attempt Analysis",{"name":40},{"id":167,"name":168,"tactic":169},"D3-CCSA","Credential Compromise Scope Analysis",{"name":40},{"id":171,"name":172,"tactic":173},"D3-PS","Process Suspension",{"name":112},{"id":175,"name":176,"tactic":177},"D3-CH","Credential Hardening",{"name":49},{"id":179,"name":180,"tactic":181},"D3-HR","Host Reboot",{"name":112},{"id":183,"name":184,"tactic":185},"D3-PSMD","Process Self-Modification Detection",{"name":40},{"id":187,"name":188,"tactic":189},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":191,"name":192,"tactic":193},"D3-ANAA","Administrative Network Activity Analysis",{"name":40},{"id":195,"name":196,"tactic":197},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":199,"name":200,"tactic":201},"D3-RIC","Reissue Credential",{"name":107},{"id":203,"name":204,"tactic":205},"D3-CR","Credential Revocation",{"name":112},{"id":207,"name":208,"tactic":209},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":211,"name":212,"tactic":213},"D3-AEM","Application Exception Monitoring",{"name":40},{"id":215,"name":216,"tactic":217},"D3-OPM","Operational Process Monitoring",{"name":40},{"id":219,"name":220,"tactic":221},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":223,"name":224,"tactic":225},"D3-FA","File Analysis",{"name":40},{"id":227,"name":228,"tactic":229},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":231,"name":232,"tactics":233,"countermeasures":237},"T1119","Automated Collection",[234],{"id":235,"name":236},"TA0100","Collection",[238,240,242,244,246,248,250,252,254,256,258],{"id":46,"name":47,"tactic":239},{"name":49},{"id":109,"name":110,"tactic":241},{"name":112},{"id":223,"name":224,"tactic":243},{"name":40},{"id":37,"name":38,"tactic":245},{"name":40},{"id":155,"name":156,"tactic":247},{"name":107},{"id":92,"name":93,"tactic":249},{"name":58},{"id":72,"name":73,"tactic":251},{"name":35},{"id":76,"name":77,"tactic":253},{"name":35},{"id":84,"name":85,"tactic":255},{"name":35},{"id":96,"name":97,"tactic":257},{"name":35},{"id":100,"name":101,"tactic":259},{"name":35},{"id":261,"name":262,"tactics":263,"countermeasures":265},"T1213","Data from Information Repositories",[264],{"id":235,"name":236},[266,268,272,276],{"id":126,"name":127,"tactic":267},{"name":129},{"id":269,"name":270,"tactic":271},"D3-DNR","Decoy Network Resource",{"name":58},{"id":273,"name":274,"tactic":275},"D3-NRAM","Network Resource Access Mediation",{"name":35},{"id":104,"name":105,"tactic":277},{"name":107},{"id":279,"name":280,"tactics":281,"countermeasures":283},"T1530","Data from Cloud Storage",[282],{"id":235,"name":236},[],{"id":285,"name":286,"tactics":287,"countermeasures":289},"T1555","Credentials from Password Stores",[288],{"id":28,"name":29},[290,292,294,296,298,300,302,304,306,308,310,312,314,316,318],{"id":109,"name":110,"tactic":291},{"name":112},{"id":92,"name":93,"tactic":293},{"name":58},{"id":126,"name":127,"tactic":295},{"name":129},{"id":72,"name":73,"tactic":297},{"name":35},{"id":76,"name":77,"tactic":299},{"name":35},{"id":84,"name":85,"tactic":301},{"name":35},{"id":96,"name":97,"tactic":303},{"name":35},{"id":100,"name":101,"tactic":305},{"name":35},{"id":223,"name":224,"tactic":307},{"name":40},{"id":46,"name":47,"tactic":309},{"name":49},{"id":37,"name":38,"tactic":311},{"name":40},{"id":155,"name":156,"tactic":313},{"name":107},{"id":51,"name":52,"tactic":315},{"name":35},{"id":104,"name":105,"tactic":317},{"name":107},{"id":319,"name":320,"tactic":321},"D3-SCA","System Call Analysis",{"name":40},{"id":323,"name":324,"tactics":325,"countermeasures":327},"T1602","Data from Configuration Repository",[326],{"id":235,"name":236},[],{"id":329,"name":330,"techniques":331},"CAPEC-639","Probe System Files",[332,342,388,434,458],{"id":333,"name":334,"tactics":335,"countermeasures":337},"T1039","Data from Network Shared Drive",[336],{"id":235,"name":236},[338,340],{"id":269,"name":270,"tactic":339},{"name":58},{"id":273,"name":274,"tactic":341},{"name":35},{"id":343,"name":344,"tactics":345,"countermeasures":347},"T1552.001","Credentials In Files",[346],{"id":28,"name":29},[348,350,352,354,356,358,360,362,364,366,368,370,372,374,376,378,380,382,384,386],{"id":37,"name":38,"tactic":349},{"name":40},{"id":223,"name":224,"tactic":351},{"name":40},{"id":68,"name":69,"tactic":353},{"name":49},{"id":167,"name":168,"tactic":355},{"name":40},{"id":55,"name":56,"tactic":357},{"name":58},{"id":64,"name":65,"tactic":359},{"name":49},{"id":199,"name":200,"tactic":361},{"name":107},{"id":92,"name":93,"tactic":363},{"name":58},{"id":155,"name":156,"tactic":365},{"name":107},{"id":109,"name":110,"tactic":367},{"name":112},{"id":175,"name":176,"tactic":369},{"name":49},{"id":147,"name":148,"tactic":371},{"name":35},{"id":72,"name":73,"tactic":373},{"name":35},{"id":76,"name":77,"tactic":375},{"name":35},{"id":84,"name":85,"tactic":377},{"name":35},{"id":96,"name":97,"tactic":379},{"name":35},{"id":100,"name":101,"tactic":381},{"name":35},{"id":203,"name":204,"tactic":383},{"name":112},{"id":118,"name":119,"tactic":385},{"name":112},{"id":46,"name":47,"tactic":387},{"name":49},{"id":389,"name":390,"tactics":391,"countermeasures":393},"T1552.003","Shell History",[392],{"id":28,"name":29},[394,396,398,400,402,404,406,408,410,412,414,416,418,420,422,424,426,428,430,432],{"id":72,"name":73,"tactic":395},{"name":35},{"id":199,"name":200,"tactic":397},{"name":107},{"id":167,"name":168,"tactic":399},{"name":40},{"id":109,"name":110,"tactic":401},{"name":112},{"id":76,"name":77,"tactic":403},{"name":35},{"id":84,"name":85,"tactic":405},{"name":35},{"id":96,"name":97,"tactic":407},{"name":35},{"id":100,"name":101,"tactic":409},{"name":35},{"id":155,"name":156,"tactic":411},{"name":107},{"id":55,"name":56,"tactic":413},{"name":58},{"id":175,"name":176,"tactic":415},{"name":49},{"id":46,"name":47,"tactic":417},{"name":49},{"id":64,"name":65,"tactic":419},{"name":49},{"id":203,"name":204,"tactic":421},{"name":112},{"id":68,"name":69,"tactic":423},{"name":49},{"id":92,"name":93,"tactic":425},{"name":58},{"id":118,"name":119,"tactic":427},{"name":112},{"id":147,"name":148,"tactic":429},{"name":35},{"id":223,"name":224,"tactic":431},{"name":40},{"id":37,"name":38,"tactic":433},{"name":40},{"id":435,"name":436,"tactics":437,"countermeasures":439},"T1552.004","Private Keys",[438],{"id":28,"name":29},[440,442,444,446,448,450,452,454,456],{"id":68,"name":69,"tactic":441},{"name":49},{"id":199,"name":200,"tactic":443},{"name":107},{"id":175,"name":176,"tactic":445},{"name":49},{"id":118,"name":119,"tactic":447},{"name":112},{"id":55,"name":56,"tactic":449},{"name":58},{"id":147,"name":148,"tactic":451},{"name":35},{"id":64,"name":65,"tactic":453},{"name":49},{"id":203,"name":204,"tactic":455},{"name":112},{"id":167,"name":168,"tactic":457},{"name":40},{"id":459,"name":460,"tactics":461,"countermeasures":463},"T1552.006","Group Policy Preferences",[462],{"id":28,"name":29},[464,466,468,472,474,478,480,484,488,490,492,494,496],{"id":167,"name":168,"tactic":465},{"name":40},{"id":64,"name":65,"tactic":467},{"name":49},{"id":469,"name":470,"tactic":471},"D3-CI","Configuration Inventory",{"name":129},{"id":175,"name":176,"tactic":473},{"name":49},{"id":475,"name":476,"tactic":477},"D3-NTPM","Network Traffic Policy Mapping",{"name":129},{"id":199,"name":200,"tactic":479},{"name":107},{"id":481,"name":482,"tactic":483},"D3-AM","Access Modeling",{"name":129},{"id":485,"name":486,"tactic":487},"D3-RC","Restore Configuration",{"name":107},{"id":68,"name":69,"tactic":489},{"name":49},{"id":118,"name":119,"tactic":491},{"name":112},{"id":147,"name":148,"tactic":493},{"name":35},{"id":55,"name":56,"tactic":495},{"name":58},{"id":203,"name":204,"tactic":497},{"name":112},[],[],[],[],[],[],"2026-09-03T23:57:15.878Z","Received",{"cisa_kev":507,"cisa_ransomware":507,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":508,"severity_score":509,"severity_version":510,"severity_source":511,"severity_vector":512,"severity_status":505},false,"critical",9.2,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N",[514],{"url":515,"sources":516,"tags":518},"https://support.cpanel.net/hc/en-us/articles/43171958716439-Security-CSF-Security-Release-September-3rd-2026",[511,517],"nvd",[],[],[],[522,525],{"source":511,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":523},{"baseScore":509,"baseSeverity":524,"vectorString":512,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":517,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":526},{"baseScore":509,"baseSeverity":524,"vectorString":527,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[529,542],{"ecosystem":9,"name":530,"vendor":531,"product":532,"cpe_part":533,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":534},"ConfigServer Security & Firewall","configserver","configserver security & firewall","a",[535],{"version":536,"is_range":537,"range_type":511,"version_start":538,"version_start_type":539,"version_end":540,"version_end_type":541,"fixed_in":9},">= 14.02, \u003C *",true,"14.02","including","*","excluding",{"ecosystem":9,"name":530,"vendor":543,"product":532,"cpe_part":533,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":544},"webpros",[545],{"version":546,"is_range":537,"range_type":511,"version_start":538,"version_start_type":539,"version_end":547,"version_end_type":541,"fixed_in":9},">= 14.02, \u003C 16.31","16.31"]