Güvenlik Danışarlıklarına Dön

cPanel CVE-2026-67401: A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as

cPanel is affected by CVE-2026-67401. A CVSS 9.9 SQL injection in cPanel's EmailTrack functionality: an authenticated cPanel account with mail-related privileges can achieve arbitrary file creation and remote code execution as root. Patched in the cPanel security release of 2026-09-08. CVSS base score: 9.9.

Critical 9.9 CVSS
cPanel

SharedLicense lisansı altında bunun anlamı

Your SharedLicense license itself is not affected — this is a vulnerability in cPanel software, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell cPanel under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-67401

Sıkça Sorulan Sorular

What is CVE-2026-67401?
A CVSS 9.9 SQL injection in cPanel's EmailTrack functionality: an authenticated cPanel account with mail-related privileges can achieve arbitrary file creation and remote code execution as root. Patched in the cPanel security release of 2026-09-08.
Is CVE-2026-67401 being exploited in the wild?
No confirmed exploitation has been announced. Patch on your normal schedule and watch the vendor advisory for updates.
How do I fix CVE-2026-67401?
Update cPanel to the patched release.Then confirm the running version matches the patched release listed above.

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin