Exploit for CVE-2026-67401

CVE-202...

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user. cPanel published the...

CVE-2026-67401

creationtimestamp| type| source ---|---|--- 2026-09-09 01:47:32+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv2g6go54o2t 2026-09-09 08:24:51+00:00| seen| https://bsky.app/profile/uutis.bsky.social/post/3mv34etv6xs25 2026-09-09 09:00:51+00:00| seen|...

cPanel EmailTrack CVE-2026-67401 Scanner / Mitigation

This toolkit provides detection and mitigation utilities for CVE-2026-67401, a SQL injection vulnerability affecting the cPanel and WHM EmailTrack functionality. The included scanner checks the installed cPanel version and package integrity, searches system and database logs for suspicious...

PT-2026-88179

🔒 CYBERSECURITY, PRIVACY & OPEN SOURCE ROUNDUP — September 9, 2026 1️⃣ CPANEL EMAILTRACK SQL INJECTION LEADS TO ROOT A critical flaw in cPanel CVE-2026-67401 turns the EmailTrack feature into a full remote-code-execution path: a regular authenticated cPanel account with mail privileges can abuse...