CVE-2026-58048

CVSS: 9.4 Critical
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Risk score: 75.2
Published: 2026-07-31
Status: Published

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

Weaknesses

CWE-89

Coverage 3

vulnerability

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

A critical security vulnerability in cPanel and WebHost Manager (WHM) allows an authenticated user adding parked or addon domains to execute code as the root user, potentially leading to full server control. While the vu…

The Hacker News · 2d ago Critical

CVE-2026-65643 CVE-2026-58048 CVE-2026-58047 cpanel vulnerability root

ransomware

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

This week’s security news is dominated by AI-related threats, including a vulnerability exploited in Metabase, a new Shai-Hulud worm leveraging the MCP Registry, and a Chinese review of Palo Alto Networks. Alongside the…

The Hacker News · Aug 10, 2026 High

CVE-2026-34348 CVE-2026-18497 CVE-2026-63508 CH ransomware supply-chain vishing

vulnerability

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

A critical vulnerability (CVE-2026-58048) in cPanel allows authenticated hosting customers to execute arbitrary database commands with administrative privileges, potentially leading to system-wide compromise. This flaw s…

The Hacker News · Aug 4, 2026 Critical

CVE-2026-58048 CVE-2026-58047 cve sql injection privilege escalation

All articles mentioning it

news.mlab.sh