CVE-2026-58047

CVSS: 5.6 Medium
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L
Risk score: 44.8
Published: 2026-07-31
Status: Published

HTTP Smuggling in cPanel allows potential leak of credentials.

Weaknesses

CWE-444

Coverage 2

vulnerability

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

A critical security vulnerability in cPanel and WebHost Manager (WHM) allows an authenticated user adding parked or addon domains to execute code as the root user, potentially leading to full server control. While the vu…

The Hacker News · 2d ago Critical

CVE-2026-65643 CVE-2026-58048 CVE-2026-58047 cpanel vulnerability root

vulnerability

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

A critical vulnerability (CVE-2026-58048) in cPanel allows authenticated hosting customers to execute arbitrary database commands with administrative privileges, potentially leading to system-wide compromise. This flaw s…

The Hacker News · Aug 4, 2026 Critical

CVE-2026-58048 CVE-2026-58047 cve sql injection privilege escalation

All articles mentioning it

news.mlab.sh

CVE-2026-58047

Weaknesses

Coverage 2

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

Advisories and references