#cpanel


New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

Sep 23, 2026 // 15:17

A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take “full control of the […]

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Sep 16, 2026 // 14:10

Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the […]

Acronis warns of actively exploited flaw in its cPanel backup plugin

Sep 16, 2026 // 00:56

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in […]

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

Sep 9, 2026 // 11:29

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related […]

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Aug 28, 2026 // 12:50

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code […]

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

Aug 5, 2026 // 14:35

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database’s root context, crossing the privilege boundary between a cPanel […]

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Jul 23, 2026 // 14:30

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost […]

CISA warns of another cPanel plugin flaw exploited in attacks

Jun 16, 2026 // 14:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) […]

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

Jun 16, 2026 // 09:10

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring […]

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

Jun 16, 2026 // 08:50

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring […]

1 2 3 Next