importantSYS.SOURCE: The Hacker News• 2026-09-09T13:49:32+05:30

Critical cPanel Vulnerability Allows Privilege Escalation via EmailTrack Module

#cpanel #sql-injection #privilege-escalation #web-security

A critical cPanel vulnerability (CVE-2026-67401) allows authenticated accounts with mail privileges to execute arbitrary code as root through an SQL injection in the EmailTrack module. The flaw affects all supported cPanel/WHM versions and enables full server compromise if unpatched.

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user.

cPanel published the advisory on September 8 and says every supported version of cPanel and WHM is affected.

Read original article

*** END OF TRANSMISSION ***

> GOOGLE CHROME V8 ZERO-DAY EXPLOITED IN THE WILD FOR SANDBOX CODE EXECUTION > AI RESEARCHER JACOB COXON RESIGNS FROM ANTHROPIC, WARNS OF EXISTENTIAL RISKS > CRITICAL CPANEL VULNERABILITY ALLOWS PRIVILEGE ESCALATION VIA EMAILTRACK MODULE > F5 BIG-IP APM MALWARE EVADES DISK SCANS BY INJECTING PHP WEB SHELL INTO MEMORY > GPT-5.6 SOL'S APPLICATION IN QUANTUM COMPUTING EXPERIMENTS > THE PSYCHOLOGY OF MOTIVATION AND SCIENTIFIC PROGRESS > RESEARCHER DEMONSTRATES BYPASS OF MICROSOFT DEFENDER'S SHIELDBREAK PATCH VIA SHIELDCRASH VULNERABILITY > COPYRIGHT ABOLITION CLAIM AND MASTODON WEB APPLICATION TECHNICAL REQUIREMENTS > SAP ADDRESSES CRITICAL CVSS 10.0 VULNERABILITY IN KERNEL ALLOWING UNAUTHENTICATED RCE > TRADEMARK STATUS OF 'TWEET' AND BIRD LOGO IN X V. PROJECT BLUEBIRD CASE> GOOGLE CHROME V8 ZERO-DAY EXPLOITED IN THE WILD FOR SANDBOX CODE EXECUTION > AI RESEARCHER JACOB COXON RESIGNS FROM ANTHROPIC, WARNS OF EXISTENTIAL RISKS > CRITICAL CPANEL VULNERABILITY ALLOWS PRIVILEGE ESCALATION VIA EMAILTRACK MODULE > F5 BIG-IP APM MALWARE EVADES DISK SCANS BY INJECTING PHP WEB SHELL INTO MEMORY > GPT-5.6 SOL'S APPLICATION IN QUANTUM COMPUTING EXPERIMENTS > THE PSYCHOLOGY OF MOTIVATION AND SCIENTIFIC PROGRESS > RESEARCHER DEMONSTRATES BYPASS OF MICROSOFT DEFENDER'S SHIELDBREAK PATCH VIA SHIELDCRASH VULNERABILITY > COPYRIGHT ABOLITION CLAIM AND MASTODON WEB APPLICATION TECHNICAL REQUIREMENTS > SAP ADDRESSES CRITICAL CVSS 10.0 VULNERABILITY IN KERNEL ALLOWING UNAUTHENTICATED RCE > TRADEMARK STATUS OF 'TWEET' AND BIRD LOGO IN X V. PROJECT BLUEBIRD CASE