High severity8.8NVD Advisory· Published Sep 1, 2026· Updated Sep 17, 2026
CVE-2026-65643
CVE-2026-65643
Description
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
4- New Cpanel Vulnerability Allows Attackers to Access Other Users’ AccountsCyber Security News · Sep 23, 2026
- ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and MoreThe Hacker News · Aug 31, 2026
- Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole ServerThe Hacker News · Aug 28, 2026
- Critical cPanel Vulnerability Allows Attackers to Take Full Server ControlCyber Security News · Aug 28, 2026