Reported by 2 outlets
Critical cPanel Vulnerability Allows Attackers to Gain Full Root Control of Servers
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Critical cPanel Vulnerability Allows Attackers to Gain Full Root Control of Servers
gbhackers.com · 47d ago · August 28th, 2026
A critical vulnerability in cPanel/WHM could allow authenticated attackers to gain root-level code execution and take full control of vulnerable hosting servers, according to a security advisory published by cPanel on August 27, 2026. The vulnerability is tracked as CVE-2026-65643 and affects cPanel’s domain parking and addon-domain functionality. Critical cPanel Vulnerability An attacker with access […] The post Critical cPanel Vulnerability Allows Attackers to Gain Full Root Control of Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
cPanel Flaw Lets Attackers Take Full Server Control With Root Access
cyberpress.org · 46d ago · August 28th, 2026
A newly disclosed vulnerability in cPanel and WHM , the widely deployed web hosting management platform, could allow a low-privilege authenticated user to obtain root-level control of an entire server. Tracked as CVE-2026-65643, the issue affects cPanel’s domain parking functionality and was publicly detailed in a security advisory published on August 27, 2026, by cPanel support engineer Devon Courtney. The vulnerability is particularly serious for shared-hosting and reseller environments, where numerous unrelated customers may operate on the same physical or virtual server. cPanel Flaw Lets Attackers Take Full Server Control According to cPanel, an authenticated account with permission to add parked or addon domains can exploit the flaw to create arbitrary files on the underlying server. That capability can ultimately result in code execution with root privileges, allowing an attacker to bypass the normal isolation boundaries separating hosting accounts. Domain parking is a standard cPanel feature that enables customers to direct additional domain names to an existing website without creating a separate hosting account. Because parked and addon domains are commonly enabled across shared-hosting environments, the affected functionality could be broadly accessible to ordinary customer accounts. Although exploitation requires authentication, that requirement offers limited protection in multi-tenant hosting settings. An attacker could purchase a low-cost hosting package, compro