CVE-2026-58047 2

Vulnerability (CVE)

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

cPanel patched CVE-2026-58048, a CVSS 9.4 privilege escalation in its database-renaming process that lets an authenticated hosting customer with MySQL/MariaDB access run SQL in the database's root context, affecting all supported versions of cPanel & WHM...

Vulnerabilities & Patching

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Cyber Risks The Hacker News

cPanel released patches for CVE-2026-65643, a critical flaw in domain parking and addon domain functionality in cPanel and WHM that affects all supported versions and lets an authenticated account holder who can add parked or addon domains create arbitrary...

Vulnerabilities & Patching