cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user. cPanel published theadvisory on September 8and says every supported version of cPanel and WHM is affected.
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
The Hacker News - 9 Sep 2026 13:49
cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user. cPanel published theadvisory on September 8and says every supported version of cPanel and WHM is affected.
Share this Article
Recommended