ThreatVectr
Tag

#cPanel

7 stories taggedcPanel.

Server room with multiple tall rack units illuminated in blue and green, one unit's indicator lights flashing amber in an irregular pattern suggesting abnormal
Vulnerabilities

cPanel Patches Bug That Let One Mail Account Hijack a Whole Server

A flaw in cPanel's EmailTrack tool let any authenticated mailbox user write files and run commands as root, the top-level administrator with total control of the machine.

3 min read
A web hosting control panel open on a monitor showing multiple website directories, with one highlighted folder containing a lock icon being bypassed, the backg
Vulnerabilities

LiteSpeed Flaw Lets a Single Hosting Account Take Over a Shared Server

cPanel warns that a critical bug in LiteSpeed Web Server Enterprise gives a low-privilege user a path to full root control, putting every website on the same machine at risk.

3 min read
A server room with multiple dark tower units and blinking status lights, with one unit's access panel slightly ajar revealing the internal circuitry, suggesting
Vulnerabilities

Acronis backup add-on carries a Linux privilege flaw, and someone is already using it

A high-severity bug in Acronis backup plugins for cPanel, WHM and Plesk is being exploited in what the vendor calls limited, targeted attacks. Patches are out.

3 min read
A server rack with one machine highlighted in red among dozens of others, with a digital lock symbol fracturing across its surface to show vulnerability spreadi
Vulnerabilities

Critical cPanel Bug Lets a Single Hosting Customer Seize an Entire Server

A flaw in domain parking, tracked as CVE-2026-65643, could hand root control of a shared hosting server to any customer with an account on it.

4 min read
A hosting control panel on a computer screen showing database management interfaces, with visual indicators highlighting the boundary between user-level account
Vulnerabilities

cPanel patches critical database flaw that let hosting customers run SQL as root

A newly disclosed bug, CVE-2026-58048, crossed the line between a single hosting account and the server's master database identity. cPanel has shipped a targeted fix.

3 min read
A code repository interface showing PHP packages in GitHub, with hidden scanning and reconnaissance scripts automatically executing in the background, cPanel co
Threat Intelligence

Hijacked GitHub Repos Turned Into Attack Machines Hunting cPanel Servers

Researchers found booby-trapped PHP packages using GitHub's own automation to scan the internet for web hosting control panels.

4 min read
Illustration: A computer server with a warning sign indicating a critical vulnerability
Vulnerabilities

LiteSpeed cPanel Plugin Flaw Hands Root to Any Logged-In User, and the Vendor Won't Say How Many Hosts Are Hit

CVE-2026-48172 carries a CVSS of 10.0, is already being exploited, and LiteSpeed has not answered three questions about exploitation telemetry.

3 min read
© 2026 Threat Vectr