URL has been copied successfully!
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root


Tags: , ,

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database’s root context, crossing the privilege boundary between a cPanel account and the server’s administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries.The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Microsoft’s January 2026 Patch Tuesday Addresses 113 CVEs (CVE-2026-20805)
  2. Critical Fortinet FortiClientEMS flaw allows remote code execution
  3. CISA Warns Drupal Core SQL Injection Vulnerability Is Being Exploited in Attacks
  4. Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks