New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-23 12:16 UTC
  • Importiert: 2026-09-30 09:47 UTC
  • Quelle-ID: thn_global
  • uid_hash: 1e3221e2fd986a6442ab75ce235927d0abcb63fe2f472056ea9569936ffa2a1b

Inhalt

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22.

A second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts.

cPanel has released fixed versions for both,

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews