CVE-2026-104586

AUTOM8N WHM/cPanel plugin through commit 82821f7 contains an OS Command Injection in borgrestore.cgi...

EUVD-2026-102131

AUTOM8N WHM/cPanel plugin through commit 82821f7 contains an OS Command Injection in borgrestore.cgi...

CVE-2026-104586

The AUTOM8N WHM/cPanel plugin (through commit 82821f7 ) is vulnerable to an OS Command Injection within the borg_restore.cgi script. The root cause is the unsanitized concatenation of HTTP GET/POST form parameters into system commands executed via subprocess.Popen(cmd, shell=True). Because CGI sc...