importantSYS.SOURCE: The Hacker News• 2026-09-23T17:46:00+05:30

Critical cPanel Vulnerability Enables Root Code Execution via Hosting Accounts

#cpanel #vulnerability #privilege-escalation #web-security #wordpress

A critical vulnerability in cPanel's CalDAV and CardDAV services allows hosting account holders to execute code as root and gain full server control, while another flaw in the WP Toolkit plugin enables database modifications across accounts. Affected versions require immediate updates to mitigate risks of privilege escalation and data exposure.

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22.

A second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts.

cPanel has released fixed versions for both,

Read original article

*** END OF TRANSMISSION ***

> YOUTUBE MUSIC ENHANCES USER INTERACTION WITH AI-POWERED CONVERSATIONAL FEATURES > RESTORING THE PORTOBELLO POLICE STATION CLOCK MECHANISM > STRANDS HARNESS: STATE-OF-THE-ART AGENT WITH 28% LOWER TOKEN COST > EIGHT SLEEP UNVEILS SMALLER AND SOLO-SIZED POD 6 SLEEP TECH DEVICE WITH ENHANCED TEMPERATURE CONTROL AND GLOBAL EXPANSION PLANS > INSIDE THE EVOLVING LANDSCAPE OF VENTURE CAPITAL AT TECHCRUNCH DISRUPT 2026 > YOUTUBE ENHANCES CREATOR TOOLS WITH AI-POWERED ANALYTICS AND THUMBNAIL GENERATION IN STUDIO APP > YOUTUBE ENHANCES VIDEO SHOPPING WITH AI-POWERED 'ASK YOUTUBE' FEATURE > YOUTUBE INTRODUCES AI-POWERED CREATOR TOOLS FOR VIDEO OPTIMIZATION AND LIVE ENGAGEMENT > YOUTUBE INTRODUCES AI-POWERED CUSTOM FEEDS FEATURE FOR USER-DEFINED VIDEO RECOMMENDATIONS > YOUTUBE INTRODUCES SHORT SERIES FEATURE FOR STRUCTURED EPISODIC CONTENT ON SHORTS> YOUTUBE MUSIC ENHANCES USER INTERACTION WITH AI-POWERED CONVERSATIONAL FEATURES > RESTORING THE PORTOBELLO POLICE STATION CLOCK MECHANISM > STRANDS HARNESS: STATE-OF-THE-ART AGENT WITH 28% LOWER TOKEN COST > EIGHT SLEEP UNVEILS SMALLER AND SOLO-SIZED POD 6 SLEEP TECH DEVICE WITH ENHANCED TEMPERATURE CONTROL AND GLOBAL EXPANSION PLANS > INSIDE THE EVOLVING LANDSCAPE OF VENTURE CAPITAL AT TECHCRUNCH DISRUPT 2026 > YOUTUBE ENHANCES CREATOR TOOLS WITH AI-POWERED ANALYTICS AND THUMBNAIL GENERATION IN STUDIO APP > YOUTUBE ENHANCES VIDEO SHOPPING WITH AI-POWERED 'ASK YOUTUBE' FEATURE > YOUTUBE INTRODUCES AI-POWERED CREATOR TOOLS FOR VIDEO OPTIMIZATION AND LIVE ENGAGEMENT > YOUTUBE INTRODUCES AI-POWERED CUSTOM FEEDS FEATURE FOR USER-DEFINED VIDEO RECOMMENDATIONS > YOUTUBE INTRODUCES SHORT SERIES FEATURE FOR STRUCTURED EPISODIC CONTENT ON SHORTS