> TritonInfoSec News
Home / Aug 30, 2026 / Story
0
#6 The Hacker News general August 28, 2026 at 09:45 UTC

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

By [email protected] (The Hacker News)

AI Summary

cPanel has patched CVE-2026-65643, a critical vulnerability in cPanel & WHM's domain parking and addon domain functionality that could allow a malicious hosting customer to execute code as root, effectively taking full control of a shared server and all other customers hosted on it. The flaw affects all supported versions of cPanel & WHM, making it a high-priority patch for any managed hosting provider or shared hosting environment. Root-level compromise via a tenant boundary escape makes this a severe multi-tenant risk.

Read full article → https://thehackernews.com/2026/08/critical-cpanel-…

Relevance score: 72.0/100

# More from August 30

  1. 1
    PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions The Hacker News
  2. 2
    Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication The Hacker News
  3. 3
    OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems SecurityWeek
  4. 4
    Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more Graham Cluley
  5. 5
    ATF Confirms Cyber Incident After Ransomware Group Claims Attack SecurityWeek
  6. 7
    ServiceNow warns of three max severity security vulnerabilities BleepingComputer
  7. 8
    Over 8,300 Gitea servers vulnerable to code execution attacks BleepingComputer
  8. 9
    Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable The Hacker News
  9. 10
    Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth The Hacker News