Skip to content
archivevulnerability · 04 Aug 2026 · 12:29 UTC

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

VULNCVE-2026-58048source · SCA

last 60 dispatches · spectrum

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. …

CVE · detail
grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected