#cpanel
-
Acronis: Actively Exploited Vulnerability in cPanel Backup Plugin
Acronis has reported a high-severity local privilege escalation vulnerability in its plugins for cPanel, WHM and Plesk. According to the company, the flaw is already being used in limited, targeted attacks.
-
Critical LiteSpeed Enterprise Flaw Hands Out Root on Shared Hosting
cPanel warned that a defect in LiteSpeed Web Server Enterprise lets the owner of a single account take over an entire shared-hosting server. A patch is already out, but it's in no hurry to arrive automatically.
-
Critical cPanel Vulnerability: A Hosting Customer Could Run SQL as the Database Root
cPanel has patched CVE-2026-58048 (CVSS 9.4), which let a hosting account holder execute arbitrary SQL commands with administrative privileges. The same release fixes two more flaws that broke through account boundaries.