Exploit for CVE-2026-67401

CVE-202...

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there, run code as the root user. cPanel published the...

CVE-2026-67401

creationtimestamp| type| source ---|---|--- 2026-09-09 01:47:32+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv2g6go54o2t 2026-09-09 08:24:51+00:00| seen| https://bsky.app/profile/uutis.bsky.social/post/3mv34etv6xs25 2026-09-09 09:00:51+00:00| seen|...

cPanel EmailTrack CVE-2026-67401 Scanner / Mitigation

This toolkit provides detection and mitigation utilities for CVE-2026-67401, a SQL injection vulnerability affecting the cPanel and WHM EmailTrack functionality. The included scanner checks the installed cPanel version and package integrity, searches system and database logs for suspicious...

PT-2026-88179

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.110.0.143 cPanel versions prior to 11.134.0.55 cPanel versions prior to 11.136.0.39 cPanel versions prior to 11.138.0.4 cPanel WP Squared versions prior to 11.138.1.9 Description A SQL injection flaw exists in the...