importantSYS.SOURCE: The Hacker News• 2026-08-04T16:06:27+05:30

Critical cPanel Vulnerability Allows Privilege Escalation via SQL Execution

#database security #sql injection #privilege escalation #server security

A critical cPanel vulnerability (CVE-2026-58048) allows authenticated users to execute SQL with database root privileges through a flaw in the database-renaming process, potentially enabling full system compromise. The advisory also addresses two additional vulnerabilities: an HTTP request-smuggling issue and an Exim privilege escalation flaw.

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries.

The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

Read original article

*** END OF TRANSMISSION ***

> ANDROID 17 QPR1 INTRODUCES NEW APIS EXCLUSIVELY FOR PIXEL OS WITHOUT AOSP RELEASE > LINGUISTIC ILLEGIBILITY IN LARGE LANGUAGE MODELS: IMPLICATIONS FOR SECURITY > DIRECT SEMANTIC COMMUNICATION BETWEEN LARGE LANGUAGE MODELS VIA CACHE-TO-CACHE MECHANISM > OPTIMIZING MEMORY USAGE WITH MATHEMATICAL TECHNIQUES AND RUST PROGRAMMING > TYPESAFE AI'S JEV MODEL OFFERS CALIBRATED DECISIONS FOR SOFTWARE AUTOMATION > APPLE UNVEILS IPHONE DUO SIMULATOR AND XCODE 27.1 BETA FOR DEVELOPERS > U.S. BORDER AGENTS PERMITTED TO SEARCH CELLPHONES WITHOUT WARRANT OR SUSPICION > DISNEY'S FIRST CTO JOINS AI STARTUP PREVIOUSLY ACCUSED OF IP INFRINGEMENT > QUICK-COMMERCE PLATFORMS DELIVER NEW IPHONES IN MINUTES IN INDIA > GOOGLE INTRODUCES FAMILY-FOCUSED AI AGENT CC FOR HOUSEHOLD COORDINATION> ANDROID 17 QPR1 INTRODUCES NEW APIS EXCLUSIVELY FOR PIXEL OS WITHOUT AOSP RELEASE > LINGUISTIC ILLEGIBILITY IN LARGE LANGUAGE MODELS: IMPLICATIONS FOR SECURITY > DIRECT SEMANTIC COMMUNICATION BETWEEN LARGE LANGUAGE MODELS VIA CACHE-TO-CACHE MECHANISM > OPTIMIZING MEMORY USAGE WITH MATHEMATICAL TECHNIQUES AND RUST PROGRAMMING > TYPESAFE AI'S JEV MODEL OFFERS CALIBRATED DECISIONS FOR SOFTWARE AUTOMATION > APPLE UNVEILS IPHONE DUO SIMULATOR AND XCODE 27.1 BETA FOR DEVELOPERS > U.S. BORDER AGENTS PERMITTED TO SEARCH CELLPHONES WITHOUT WARRANT OR SUSPICION > DISNEY'S FIRST CTO JOINS AI STARTUP PREVIOUSLY ACCUSED OF IP INFRINGEMENT > QUICK-COMMERCE PLATFORMS DELIVER NEW IPHONES IN MINUTES IN INDIA > GOOGLE INTRODUCES FAMILY-FOCUSED AI AGENT CC FOR HOUSEHOLD COORDINATION