importantSYS.SOURCE: The Hacker News• 2026-09-23T17:46:00+05:30

Critical cPanel Vulnerability Enables Root Code Execution via Hosting Accounts

#cpanel #vulnerability #privilege-escalation #web-security #wordpress

A critical vulnerability in cPanel's CalDAV and CardDAV services allows hosting account holders to execute code as root and gain full server control, while another flaw in the WP Toolkit plugin enables database modifications across accounts. Affected versions require immediate updates to mitigate risks of privilege escalation and data exposure.

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22.

A second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts.

cPanel has released fixed versions for both,

Read original article

*** END OF TRANSMISSION ***

> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY