Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality – August 27, 2026
An authenticated cPanel account holder who is able to add parked or addon domains can create arbitrary files on the server.
डिफ़ॉल्ट अपडेट कमांड
sudo /scripts/upcp --forceSharedLicense लाइसेंस के तहत इसका अर्थ
Your SharedLicense license itself is not affected — this is a vulnerability in cPanel software, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell cPanel under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.
Situation
An authenticated cPanel account holder who is able to add parked or addon domains can create arbitrary files on the server.
Affected Product Versions
| Product | Affected Versions | Patched Versions |
|---|---|---|
| cPanel/WHM | All supported versions |
|
Impact
Successful exploitation leads to code execution as the root user, giving an attacker full control of the server and every account, website, and database on it.
Call to action
Update to the latest patched version: How do I update cPanel/WHM?
अक्सर पूछे जाने वाले प्रश्न
What is CVE-2026-65643?
Is CVE-2026-65643 being exploited in the wild?
How do I fix CVE-2026-65643?
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें