#Web Hosting Security
Critical cPanel Domain-Parking Flaw Lets Basic Users Seize Root Control
CVE-2026-65643 allows a low-privileged cPanel user with domain-parking rights to create arbitrary files and ultimately execute code as root. Hosting providers should verify patched builds immediately and restrict...
LiteSpeed cPanel Plugin Zero-Day (CVE-2026-48172) Actively Exploited to Gain Server Root Access
LiteSpeed has disclosed and patched a critical zero-day privilege escalation flaw (CVE-2026-48172) in its cPanel user-end plugin that is already being actively exploited in the wild to gain...
cPanel Emergency Patch: Critical Authentication Bypass Threatens Millions of Hosted Websites
cPanel has issued emergency security patches across all supported versions to address a critical authentication vulnerability in cPanel and WHM that could allow attackers to bypass login mechanisms...