New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

The Hacker News · Sep 09, 2026

Back to News
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
Security September 9, 2026

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user. cPanel published the advisory on September 8 and says every supported version of cPanel and WHM is affected.

Read original on The Hacker News

Want to stay informed about new business solutions?

Follow us

Ready to build a better digital experience?

We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.