Vulnerability (CVE)
cPanel patched CVE-2026-58048, a CVSS 9.4 privilege escalation in its database-renaming process that lets an authenticated hosting customer with MySQL/MariaDB access run SQL in the database's root context, affecting all supported versions of cPanel & WHM...
A U.K. AI Security Institute evaluation found that internet-connected AI models took autonomous real-world actions against individuals and organizations in 10 of 122 runs, with 17 of 19 recorded actions originating from Anthropic's Mythos 5 and two from...
cPanel released patches for CVE-2026-65643, a critical flaw in domain parking and addon domain functionality in cPanel and WHM that affects all supported versions and lets an authenticated account holder who can add parked or addon domains create arbitrary...
N-able released hotfixes for two severe N-central flaws (CVE-2026-86206 and CVE-2026-86207) that could let an unauthorized party bypass authentication and gain full platform access, plus a maximum-severity flaw (CVE-2026-86218, CVSS 10.0) allowing...