cPanel Database Privilege Escalation Flaw Enables Full Administrative Access

Gbhackers •Divya • August 4, 2026

CVE-2026-58048 is a critical privilege-escalation vulnerability in the database management functionality of cPanel & WHM. This flaw allows an authenticated cPanel user to execute arbitrary database commands with full administrative privileges. cPanel Database Privilege Escalation Flaw All supported versions of cPanel & WHM before the recently released security updates are affected. As WebPros states, an […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical cPanel Vulnerability Allows Full Database Access via Privilege Escalation A critical privilege-escalation vulnerability, tracked as CVE-2026-58048, has been disclosed in cPanel & WHM, allowing authenticated users to execute arbitrary SQL commands with full administrative privileges. This flaw affects all supported versions of cPanel & WHM prior to the recent security updates. The vulnerability poses a significant risk of root-level server compromise, particularly in certain configurations. The issue was published on July 31, 2026, with the first public proof of concept released on August 4, 2026. Administrators are urged to apply the latest security updates to mitigate the risk. Affected users include hosting providers and their customers utilizing cPanel & WHM for database management. The potential for exploitation is high, given the nature of the flaw and the broad usage of cPanel in web hosting environments. 3 sources 72

Extracted Entities

cPanel Database Privilege Escalation Flaw Enables Full Administrative Access

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (2)