CVE-2026-67401

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

September 9, 2026

Last Seen

September 9, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical cPanel SQL Injection Vulnerability Allows Root Access72.0

cPanel disclosed a critical SQL injection vulnerability, tracked as CVE-2026-67401, affecting its EmailTrack functionality. An authenticated user with mail privileges can exploit this flaw to create arbitrary files on the server, leading to code execution as the root user. This vulnerability impacts...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical cPanel SQL Injection Vulnerability Allows Root Access

Sep 9·4 sources

Related Articles (3)

Exploit for CVE-2026

Sploitus·Sep 9

New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server

Cybersecuritynews·Sep 9

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

Thehackernews·Sep 9

Related Entities

Sql Injection CWE-89 - SQL Injection CWE-94 - Code Injection CWE-200 - Exposure of Sensitive Information CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication T1068 - Exploitation for Privilege Escalation T1190 - Exploit Public-Facing Application T1505.003 - Web Shell cPanel WHM Apache