← Back to the feed

~/article/critical-cpanel-flaw-could-let-one-hosting-customer-take-root-control-of-itlql3
highSource: The Hacker News

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM. cPanel described the issue as a critical security vulnerability and said that an

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

CVE-2026-65643

Topics

cve
~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks
Open the consoleSee cymesh.net

Related

~/related/critical-cpanel-flaw-could-let-one-hosting-customer-take-root-control-of-itlql3