Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

A critical security vulnerability in cPanel and WebHost Manager (WHM) allows an authenticated user adding parked or addon domains to execute code as the root user, potentially leading to full server control. While the vulnerability has not yet been confirmed exploited, it's present in end-of-life versions and requires immediate patching. The vulnerability stems from a flaw in the Passenger package and has been linked to ransomware campaigns.