Critical severityNVD Advisory· Published Sep 23, 2026· Updated Sep 24, 2026
CVE-2026-87899
CVE-2026-87899
Description
Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
3- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- New Cpanel Vulnerability Allows Attackers to Access Other Users’ AccountsCyber Security News · Sep 23, 2026
- New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server ControlThe Hacker News · Sep 23, 2026