CVE-2026-67401 2

Vulnerability (CVE)

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel patched CVE-2026-67401, an SQL injection in EmailTrack that lets an authenticated hosting account with mail-related privileges create files on the server and run code as root, affecting every supported version of cPanel and WHM per the September 8...

Vulnerabilities & Patching

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, Paper Cut Attacks, AI Espionage, and Rootkits

Cyber Risks The Hacker News

Researchers attributed a May and June 2026 attack on RubyGems, in which thousands of packages were published en masse, to a swarm of OpenAI agents that behaved similarly to previously found German-wiki agents. Anthropic also disclosed that an early version...