importantSYS.SOURCE: The Hacker News• 2026-08-04T16:06:27+05:30

Critical cPanel Vulnerability Allows Privilege Escalation via SQL Execution

#database security #sql injection #privilege escalation #server security

A critical cPanel vulnerability (CVE-2026-58048) allows authenticated users to execute SQL with database root privileges through a flaw in the database-renaming process, potentially enabling full system compromise. The advisory also addresses two additional vulnerabilities: an HTTP request-smuggling issue and an Exim privilege escalation flaw.

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries.

The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

Read original article

*** END OF TRANSMISSION ***

> RUNWARE'S MODULAR DATA CENTER POD AIMS TO REVOLUTIONIZE PORTABLE AI INFRASTRUCTURE > XBOX OUTAGE DISRUPTS ACCESS TO DISC-BASED GAMES > LEAD FULL-STACK ENGINEER POSITION AT ROAME (YC S23) FOR AI-NATIVE TRAVEL TECH STARTUP > EON'S SPACE LASER NETWORK AIMS TO REPLACE UNDERSEA FIBER OPTICS FOR GLOBAL DATA TRANSMISSION > BUCKMINSTER FULLER'S 1975 LECTURES ON COMPREHENSIVE ANTICIPATORY DESIGN SCIENCE > BENDING SPOONS ACQUIRES AIRTABLE FOR $1.28 BILLION > CONCERNS ABOUT AI-GENERATED IMAGERY IN PERSONAL BLOGS > AI-ASSISTED CYBERATTACKS: THE RISE OF VIBE HACKING AND ITS IMPACT ON ENTERPRISE SECURITY > EFFICIENT FINE-TUNING OF AN 8B LANGUAGE MODEL ON RESOURCE-CONSTRAINED HARDWARE > GOOGLE REMOVES THREE ADK AI WORKFLOWS DUE TO PRIVILEGED AGENT EXPLOIT VIA GITHUB> RUNWARE'S MODULAR DATA CENTER POD AIMS TO REVOLUTIONIZE PORTABLE AI INFRASTRUCTURE > XBOX OUTAGE DISRUPTS ACCESS TO DISC-BASED GAMES > LEAD FULL-STACK ENGINEER POSITION AT ROAME (YC S23) FOR AI-NATIVE TRAVEL TECH STARTUP > EON'S SPACE LASER NETWORK AIMS TO REPLACE UNDERSEA FIBER OPTICS FOR GLOBAL DATA TRANSMISSION > BUCKMINSTER FULLER'S 1975 LECTURES ON COMPREHENSIVE ANTICIPATORY DESIGN SCIENCE > BENDING SPOONS ACQUIRES AIRTABLE FOR $1.28 BILLION > CONCERNS ABOUT AI-GENERATED IMAGERY IN PERSONAL BLOGS > AI-ASSISTED CYBERATTACKS: THE RISE OF VIBE HACKING AND ITS IMPACT ON ENTERPRISE SECURITY > EFFICIENT FINE-TUNING OF AN 8B LANGUAGE MODEL ON RESOURCE-CONSTRAINED HARDWARE > GOOGLE REMOVES THREE ADK AI WORKFLOWS DUE TO PRIVILEGED AGENT EXPLOIT VIA GITHUB