https://curasec.metacog.co.kr/tags/web-hosting/Recent content in Web-Hosting on CuraSecHugoen-usWed, 09 Sep 2026 15:05:56 +0000https://curasec.metacog.co.kr/insights/2026-09-09-new-cpanel-flaw-lets-a-hosting-account-with-mail-privileges/Wed, 09 Sep 2026 15:05:56 +0000https://curasec.metacog.co.kr/insights/2026-09-09-new-cpanel-flaw-lets-a-hosting-account-with-mail-privileges/<ul> <li><strong>Engineer — Plan:</strong> Every supported cPanel and WHM version is affected; a mail-privileged hosting account can write arbitrary files and escalate to root via EmailTrack. Patch to the latest cPanel/WHM release (advisory published Sep 8) within your next patch window — no PoC or active exploitation is confirmed yet, but root-level impact makes this high priority.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> </ul>