New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-04 10:36 UTC
Importiert: 2026-08-08 08:21 UTC
CVSS: 9.4
Quelle-ID: thn_global
uid_hash: 00eb3d695635a63ff2504755a2c67b4de86cdc4dc9d4cb7b51426327de77ba1a

The Hacker News

Inhalt

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries.

The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-58048	CRITICAL	9.4	CRITICAL	9.4			2026-07-31

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste