cPanel cPanel/WHM: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in cPanel cPanel/WHM ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode mit Administratorrechten auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-36983 linked CVEs
Open advisory with all CVEs
More on cPanel
Other advisories
- HighCVE-2026-105476WebPros cPanel: Folgen symbolischer Links (Link Following)
- HighCVE-2026-105475WebPros cPanel: Sicherheitslücke
- HighCVE-2026-105476WebPros cPanel: Folgen symbolischer Links (Link Following)
- HighCVE-2026-105475WebPros cPanel: Sicherheitslücke
- Not ratedosv:SUSE-SU-2026:4926-1Security update for perl-Cpanel-JSON-XS
- CriticalCVE-2026-110681Security update for perl-Cpanel-JSON-XS
- Not ratedosv:MGASA-2026-0559Updated perl-Cpanel-JSON-XS package fixes security vulnerabilities
- Not ratedosv:openSUSE-SU-2026:22187-1Security update for perl-Cpanel-JSON-XS
Other news entries
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server ControlNewsThe Hacker News
- Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted AttacksNewsThe Hacker News
- Acronis Patches Exploited Vulnerability in cPanel Backup PluginNewsSecurityWeek
- Acronis warns of actively exploited flaw in its cPanel backup pluginNewsBleepingComputer
- LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerNewsThe Hacker News
- cPanel cPanel/WHM: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit AdministratorrechtenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3698
ID