Tracked as CVE-2026-65643, this issue affects all supported versions of cPanel & WHM. The vendor has classified the severity as critical, urging administrators to apply the necessary updates immediately. Given that this requires no prior authentication beyond a standard hosting account, the risk of exploitation is significant for shared hosting environments.

Key takeaways:

• Vulnerability in domain parking and addon domain functions leads to root-level code execution.
• Impacts all supported versions of cPanel & WHM.
• Patches are released; immediate updating is strongly advised.

While specific technical details of the exploit chain are not yet public, the potential impact is severe. If you manage a server running cPanel, prioritizing this update is essential to prevent unauthorized root access. Administrators should verify their current version and ensure it is patched without delay.

Source: The Hacker News

Are you running a supported version of cPanel, and how quickly do you plan to roll out these patches to mitigate the risk of exploitation?