cPanel cPanel/WHM: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in cPanel cPanel/WHM ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode mit Administratorrechten auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-36983 linked CVEs
Open advisory with all CVEs
More on cPanel
Other advisories
- Not ratedosv:SUSE-SU-2026:4926-1Security update for perl-Cpanel-JSON-XS
- CriticalCVE-2026-110681Security update for perl-Cpanel-JSON-XS
- Not ratedosv:MGASA-2026-0559Updated perl-Cpanel-JSON-XS package fixes security vulnerabilities
- Not ratedosv:openSUSE-SU-2026:22187-1Security update for perl-Cpanel-JSON-XS
- Not ratedosv:openSUSE-SU-2026:12217-1perl-Cpanel-JSON-XS-4.800.0-1.1 on GA media
- HighCVE-2026-110688Cpanel-JSON-XS: ineffiziente algorithmische Komplexität
- HighCVE-2026-110687Cpanel-JSON-XS: fehlerhafte Behandlung von Unicode-Kodierung
- MediumCVE-2026-110686Cpanel-JSON-XS: Use-After-Free
Other news entries
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server ControlNewsThe Hacker News
- Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted AttacksNewsThe Hacker News
- Acronis Patches Exploited Vulnerability in cPanel Backup PluginNewsSecurityWeek
- Acronis warns of actively exploited flaw in its cPanel backup pluginNewsBleepingComputer
- LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerNewsThe Hacker News
- cPanel cPanel/WHM: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit AdministratorrechtenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3698
ID