Vulnerability in domain parking functionality of cPanel & WHM
A critical vulnerability affecting cPanel & WHM would allow an authenticated attacker to remotely execute arbitrary code with root privileges on affected systems.
Description
Technical context and vulnerability details
cPanel & WHM is a web hosting management platform providing centralized interfaces for server administration and site hosting. This solution is affected by a vulnerability labeled CVE-2026-65643, resulting from a weakness in the management of additional domains. Exploitation of this vulnerability would allow an authenticated attacker to execute code with root privileges, giving them full control of the server and all accounts, sites, and databases on it. It is classified critical.
Potential Risks & Impact
Potential consequences upon exploitation
- Executing arbitrary codes;
- Privilege escalation;
- Full control of the server and all compromised accounts;
- System integrity breach;
- Data privacy breach;
- Violation of site availability;
Affected systems
Products, components and targeted versions
- All cPanel & WHM versions supported;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Update all cPanel & WHM systems to the latest version;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.