Securityaffairs.Co

Critical cPanel Vulnerability Allows Full Database Access via Privilege Escalation

First seen 4 Aug 2026, 12:18 UTC • •72.0

Article Content

1 / 4

Browse articles

ThreatCluster •August 5, 2026 at 08:49 UTC

•CVE-2026-58048 allows privilege escalation to execute SQL commands as an admin.
•All supported versions of cPanel & WHM prior to recent updates are vulnerable.
•Immediate patching is recommended to prevent potential root-level server compromise.

A critical privilege-escalation vulnerability, tracked as CVE-2026-58048, has been disclosed in cPanel & WHM, allowing authenticated users to execute arbitrary SQL commands with full administrative privileges. This flaw affects all supported versions of cPanel & WHM prior to the recent security updates. The vulnerability poses a significant risk of root-level server compromise, particularly in certain configurations. The issue was published on July 31, 2026, with the first public proof of concept released on August 4, 2026. Administrators are urged to apply the latest security updates to mitigate the risk. Affected users include hosting providers and their customers utilizing cPanel & WHM for database management. The potential for exploitation is high, given the nature of the flaw and the broad usage of cPanel in web hosting environments.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 47d ago How this analysis works

Timeline

2026-07-31

CVE-2026-58048 published

A critical privilege escalation vulnerability in cPanel & WHM was disclosed, affecting database management functionality.

2026-08-04

First public PoC released

The first proof of concept for CVE-2026-58048 was made public, demonstrating the exploit.

Cybersecuritynews

Recent

Security updates released

cPanel & WHM released security updates to address the critical vulnerability, urging immediate application.

More articles in this cluster (3)

Threat Graph

7 entities, 9 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Privilege Escalation
Sql Injection
T1068 - Exploitation for Privilege Escalation

Vulnerability (1)

CVE-2026-58048

Weakness (1)

CWE-269 - Improper Privilege Management

Affected Platform (2)

cPanel
WHM

Relationships

CVE-2026-58048 targets cPanel
CVE-2026-58048 targets WHM
Privilege Escalation targets cPanel
Privilege Escalation targets WHM
Sql Injection targets cPanel
Sql Injection targets WHM
T1068 - Exploitation for Privilege Escalation targets cPanel
T1068 - Exploitation for Privilege Escalation targets WHM
CVE-2026-58048 related to CWE-269 - Improper Privilege Management

Following this threat?

Track CVE-2026-58048 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…