As cited
Copy frozen at (site build).
vulnerabilities
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel released patches for CVE-2026-65643, a critical vulnerability in domain parking and addon domain functionality that could allow remote code execution as the root user across all supported versions of cPanel and WebHost Manager (WHM).
Why it matters: Hosting providers and their customers using cPanel/WHM must patch immediately, as a single compromised account could grant an attacker full server control and access to all hosted domains and customer data.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel released patches for CVE-2026-65643, a critical vulnerability in domain parking and addon domain functionality affecting all supported versions of cPanel and WebHost Manager (WHM). The flaw could enable code execution with root privileges.
Why it matters: Hosting providers and administrators running cPanel/WHM must apply patches immediately, as a single authenticated customer could achieve complete server compromise.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel released patches for CVE-2026-65643, a critical vulnerability in domain parking and addon domain functionality affecting all supported versions of cPanel and WebHost Manager (WHM). The flaw could enable code execution with root privileges.
Why it matters: Hosting providers and administrators running cPanel/WHM must apply patches immediately, as a single authenticated customer could achieve complete server compromise.
- Source published
- First seen by Cybersecurity Tracker