New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
Read original article ↗AI Summary
cPanel has patched a critical vulnerability, tracked as CVE-2026-67401, that allows an authenticated hosting account with mail privileges to execute arbitrary code as root due to an SQL injection flaw in the EmailTrack component. The vulnerability affects all supported versions of cPanel and WHM, enabling a local privilege escalation path from a regular user to full server compromise. While no public exploit or active attacks have been observed as of September 9, 2026, similar recent cPanel flaws have been exploited in the wild, including in ransomware campaigns. The CVE record for this flaw had not yet been published at the time of reporting, and no mitigations are provided for systems unable to update immediately.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.