CuraSec

tag: Web-Hosting · 1 items

2026-09-09 · The Hacker News · source ↗ #cpanel#privilege-escalation#web-hosting
  • Engineer — Plan: Every supported cPanel and WHM version is affected; a mail-privileged hosting account can write arbitrary files and escalate to root via EmailTrack. Patch to the latest cPanel/WHM release (advisory published Sep 8) within your next patch window — no PoC or active exploitation is confirmed yet, but root-level impact makes this high priority.
  • SOC/IR — Skip
  • Leader — Skip