Thehackernews Critical cPanel Vulnerability Allows Full Server Control
Article Content
- •CVE-2026-65643 allows root access via cPanel's domain parking feature.
- •All cPanel and WHM installations are potentially affected.
- •Immediate action is recommended to mitigate risks from this vulnerability.
A critical vulnerability in cPanel and WHM, tracked as CVE-2026-65643, was disclosed on August 27, 2026. This flaw allows low-privileged, authenticated users to gain root-level control of the server through the domain parking functionality. Affected systems include all servers running cPanel and WHM that utilize this feature. The vulnerability poses a significant risk as it could lead to unauthorized access and control over the entire server environment. Security teams are urged to assess their systems and apply necessary patches as soon as they are available. The current status indicates that the vulnerability has been publicly disclosed, but there are no reports of active exploitation at this time.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track CVE-2026-65643 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…