CVE-2026-87899
CriticalCVSS 9.4Summary
cPanel contains an execution with unnecessary privileges vulnerability that allows remote authenticated users to execute arbitrary code with root privileges.
Risk Assessment
An authenticated user can gain full control over the server by executing code as root, leading to complete system compromise. This is a critical vulnerability.
Recommendation
Immediately update cPanel to the latest version containing the fix. Consider auditing user accounts and monitoring for unusual activity.
Other vulnerabilities in cPanel
See all- CVE-2026-67401Critical
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component.
- CVE-2026-58048Critical
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
- CVE-2026-65643High
Eval injection vulnerability in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
- CVE-2026-58047Medium
HTTP Smuggling in cPanel allows potential leak of credentials.
Original NVD description (English source)
Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.