Critical cPanel Flaw Could Let One Hosting Customer Take Root Control

…to escalate their permissions on a susceptible Linux version, potentially enabling them to perform unauthorized actions or run arbitrary code that could impact the confidentiality and integrity of the application. " This update contains fixes for 1 high-severity security vulnerability and should be installed immediately by all users ," Acronis noted in a separate advisory for 1.9.3 HF3. "Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks." There are currently no details about the vulnerability, or who is…

…versions of cPanel & WHM. cPanel described the issue as a critical security vulnerability and said that an authenticated account holder who can add parked or addon domains can create arbitrary files on the server. " Successful exploitation leads to code execution as the root user, giving an attacker full control of the server ," cPanel said in a notification to customers. cPanel has released the following patched versions - - 11.110.0.141 or later - 11.134.0.53 or later - 11.136.0.37 or later - 11.138.0.2 or later - 11.138.1.7 or later (WP…

…WebPros develops alongside cPanel, updated its own advisory for the same flaw on August 14, 2026, with a five-item checklist for spotting a prior compromise that begins with unexpected entries in /etc/ld.so.preload. " Patching closes the vulnerability going forward, but it does not undo anything an attacker may have already done ," Plesk said. Phusion, which develops Passenger, shipped a fix in Passenger 6.2.0 on August 18, 2026, for a Watchdog API flaw that does not have a CVE identifier. "We have seen exploitation of this vulnerability in the…