← Back to the feed

~/article/new-cpanel-critical-flaw-could-let-hosting-customers-run-sql-as-database-weous3
highSource: The Hacker News

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

CVE-2026-58048

Topics

cve
~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks
Open the consoleSee cymesh.net

Related

~/related/new-cpanel-critical-flaw-could-let-hosting-customers-run-sql-as-database-weous3