I can't imagine trying to manage cPanel on the public Internet in 2026, especially on shared systems.
https://nvd.nist.gov/vuln/detail/cve-2026-67401sev:CRIT 9.9 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
> A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component
:rainbowCrow:
npub1s6…8n008
2026-09-09 18:43:49 UTC
Author Public Key
npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008Published at
2026-09-09 18:43:49 UTCEvent JSON
{
"id": "312a8857b14cfca01c9955c257ec7a73b2c0d72bb6a79961153b27486fb2ffd2",
"pubkey": "86b397086a130510861dd58f255fadeee1c47815185fa3bb628a06b4d6af31ac",
"created_at": 1788979429,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@cR0w/117242555881231477",
"web"
],
[
"proxy",
"https://infosec.exchange/users/cR0w/statuses/117242555881231477",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/cR0w/statuses/117242555881231477",
"pink.momostr"
],
[
"-"
]
],
"content": "I can't imagine trying to manage cPanel on the public Internet in 2026, especially on shared systems.\n\nhttps://nvd.nist.gov/vuln/detail/cve-2026-67401sev:CRIT 9.9 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\n\n\n\n\u003e A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component",
"sig": "02eed88ea1d9744bc923e358ea5a4196cc3718a38c56ec75c7068ec98cbd68f5f0ec65d1ecde9ca21b2ab10079397713a50082b365b04f5feef05e793db4ff01"
}