Organization
7 Interestana reports mention cPanel, newest first. Each is summarised from the original reporting and links back to its publisher.
A critical security vulnerability within cPanel's CalDAV and CardDAV service, disclosed on September 22, enabled any user with a cPanel hosting account to execute code with root privileges, thereby achieving complete control over the server.
Acronis, a cybersecurity company specializing in data protection and disaster recovery, has issued a warning regarding a critical vulnerability present in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk.
A critical vulnerability identified in LiteSpeed Web Server Enterprise presents a significant security risk, potentially allowing a user with low-privilege access to a single hosting account to achieve root access on a shared server.
cPanel has issued a patch for a critical security vulnerability that allowed an authenticated user with mail-related privileges to gain complete control of a server. The flaw, detailed in an advisory published on September 8, enables an account holder…
cPanel has issued patches for a critical security vulnerability, designated CVE-2026-65643, that affects its widely used cPanel and WebHost Manager (WHM) software. This flaw, impacting domain parking and addon domain functionalities, carries the potential for code execution with root privileges.
cPanel has released a critical security update to address a vulnerability that allowed authenticated hosting customers to execute SQL commands with database root privileges. This flaw, tracked as CVE-2026-58048, enabled users to bypass account boundaries and interact with the server's…
Cybersecurity researchers have identified a large-scale campaign that leverages compromised GitHub repositories to launch distributed attacks against cPanel and WebHost Manager (WHM) servers. This sophisticated operation utilizes malicious Packagist development versions across 10 packages, all linked to a legitimate PHP…