CVE Catalog

CVE-2026-65643

HighCVSS 8.7
Published: Translated: NVD NIST

Summary

Eval injection vulnerability in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

Risk Assessment

An attacker with panel access can gain full control over the server, leading to complete system and data compromise.

Recommendation

Update cPanel to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in cPanel

See all
Original NVD description (English source)

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS