cPanel/WHM

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions2
First seenSep 9, 2026
Last mentioned11d ago

Timeline

2 articles · newest first

Ransomware affiliates using Claude left chats and tools exposed

SOCRadar found 46 INC encryptor builds, notes on 62 organizations, and more than $23,920 in recorded AI spend.

Cyber Security NewsOct 21, 11:49 UTC · 11d agoRansomwareCVE-2026-35616 CVE-2024-57727 CVE-2026-419409 · 4 reads

cPanel EmailTrack SQL Injection Flaw Lets Attackers Execute Code as Root

cPanel disclosed CVE-2026-67401, an authenticated SQL injection in EmailTrack that lets attackers write files and execute code as root.

GBHackersSep 9, 07:27 UTC · Sep 9, 2026VulnerabilityCVE-2026-674011 · 1 read

Related CVEs

by mentions

CVE-2026-3561694%9.8
Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6
published Apr 4, 2026Fortinet FortiClient EMSKEVPoC
CVE-2026-4194099%9.3
Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
published Apr 29, 2026WebPros cPanelKEVRansomwarePoC ×9
CVE-2024-5772797%7.5
Unauthenticated Path Traversal File Download in SimpleHelp 5.5.7 and Earlier
published Jan 15, 2025SimpleHelp (remote support/remote access software)KEVRansomware
CVE-2026-67401<1%9.9
Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
published Sep 9, 2026cPanel (WebPros) cPanelPoC ×5

Appears with

cPanelvendor · 2
RevSocksmalware · 1
CISAorganization · 1
SOCRadarorganization · 1
OpenCodeproduct · 1
INCmalware · 1
Claude Opus 4.6ai model · 1
Anthropicvendor · 1
OpenRouterorganization · 1
Phantommalware · 1
SimpleHelpvendor · 1
Ghostmalware · 1
Kimi K3ai model · 1
FortiClient EMSproduct · 1
INC Ransomwarethreat actor · 1
Fortinetvendor · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned 11d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.