security Source: The Hacker News
📅 23 September 2026 at 06:30 PM UTC

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

Verified Primary Feed Ingestion
↗ Open Source Publication
⚡ Executive Takeaways & Intelligence Summary
A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22. A second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts. cPanel has released fixed versions for both,
Publication Reference: https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html
← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer
Hackers pull off $133 million French bank heist via service provider
BleepingComputer
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
The Hacker News
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub