The Edge of the Cyber World See the latest

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

August 28, 2026

cyber-security
the-hacker-news
vulnerability

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user.

The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM.

cPanel described the issue as a critical security vulnerability and said that an