Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-28 09:45 UTC
  • Importiert: 2026-09-03 18:55 UTC
  • CVSS: 8.7
  • Quelle-ID: thn_global
  • uid_hash: 9ebc149c9b6d268fcc4e7c221b96a5cfda63a0a5cbec7f4253ae36f3c74519fc

Inhalt

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user.

The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM.

cPanel described the issue as a critical security vulnerability and said that an

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-65643

HIGH

8.7

HIGH

8.7

2026-09-01

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews