CVE-2026-67401
CriticalCVSS 9.9Summary
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component.
Risk Assessment
An attacker with a mail account can gain full root control over the server, leading to complete compromise of the system and all data.
Recommendation
Upgrade cPanel to the latest version containing a fix. Additionally, restrict mail account privileges and monitor logs for suspicious activity.
Other vulnerabilities in cPanel
See all- CVE-2026-58048Critical
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
- CVE-2026-65643High
Eval injection vulnerability in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
- CVE-2026-58047Medium
HTTP Smuggling in cPanel allows potential leak of credentials.
Original NVD description (English source)
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component