CVE Catalog
CVE-2026-65643
HighCVSS 8.7Summary
Eval injection vulnerability in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
Risk Assessment
An attacker with panel access can gain full control over the server, leading to complete system and data compromise.
Recommendation
Update cPanel to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in cPanel
See allOriginal NVD description (English source)
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

