CloudLinux

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 28, 2026
Last mentionedAug 28, 2026

Timeline

1 articles · newest first

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel patched critical flaw CVE-2026-65643 letting authenticated hosting customers with addon or parked domain rights execute code as root and fully compromise servers.

The Hacker NewsAug 28, 09:45 UTC · Aug 28, 2026VulnerabilityCVE-2026-65643 CVE-2026-58048 CVE-2026-58047+31

Related CVEs

by mentions

CVE-2026-4817218%10.0
Privilege Escalation (Possible Root) in LiteSpeed cPanel Plugin
published May 21, 2026LiteSpeed Technologies (litespeedtech) LiteSpeed User-End cPanel PluginKEV
CVE-2026-4194099%9.3
Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
published Apr 29, 2026WebPros cPanelKEVRansomwarePoC ×9
CVE-2026-544201%8.5
Symlink-Following Privilege Escalation in LiteSpeed cPanel Plugin Exploited in the Wild
published Jun 14, 2026LiteSpeed Technologies LiteSpeed cPanel pluginKEV
CVE-2026-58048<1%9.4
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context
published Jul 31, 2026
CVE-2026-65643<1%8.7
Authenticated eval injection in cPanel enables root code execution
published Sep 1, 2026cPanel
CVE-2026-58047<1%5.6
HTTP Smuggling in cPanel allows potential leak of credentials
published Jul 31, 2026

Appears with

WebProsvendor · 1
CISAorganization · 1
cPanelvendor · 1
Pleskvendor · 1
cPanel & WHMproduct · 1
LiteSpeedvendor · 1
Phusion Passengervendor · 1

Entities are extracted by the model from each article. First seen Aug 28, 2026, last mentioned Aug 28, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.