high
cPanel cPanel/WHM: Code execution with administrator privileges possible
CERT-Bund (BSI) reports one vulnerability in cPanel cPanel/WHM with severity high. The stated impact is code execution with administrator privileges. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
- Access needed
- yes, an account is needed
What this means for you
An attacker can run their own code with administrator privileges. First check whether the system is reachable from the internet: if it is, the update takes precedence over the regular maintenance window.
All 4 advisories for cPanel cPanel/WHM
Original source
Insights
More articles
Weekly situation, week 45: 61 advisories, 5 critical
Between 1 Nov and 8 Nov 2026 our sources recorded 61 advisories: 5 critical, 56 high.
Weekly situation, week 44: 60 advisories, 2 critical
Between 25 Oct and 1 Nov 2026 our sources recorded 60 advisories: 2 critical, 58 high.
Weekly situation, week 43: 86 advisories, 11 critical
Between 18 Oct and 25 Oct 2026 our sources recorded 86 advisories: 11 critical, 75 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.