IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
Critical cPanel Flaw Could Give One Hosting Account Root Access
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
IT Procurement & Hardware Managed Service
IT Procurement & Hardware Managed Service Keep your technology running smoothly from the hardware you use every day to the systems that power your business. We provide end-to-end IT management so …
cPanel has released a patch for a critical flaw in parked domain and addon domain features.
The issue is tracked as CVE-2026-65643. It affects all supported versions of cPanel & WHM.
If exploited, one hosting account could gain root-level control of the entire server.
How Does the Flaw Work?
The issue affects authenticated users who can add parked or addon domains.
Under these conditions, a user can create arbitrary files on the server. After that, an attacker may be able to execute code as root.
As a result, a limited hosting account could take full control of the server.
This is especially serious for shared hosting systems that serve many customers on one machine.
Fixed Versions
cPanel has released several patched builds.
Fixed versions include 11.110.0.141, 11.134.0.53, 11.136.0.37, and 11.138.0.2 or later.
In addition, WP Squared is fixed in version 11.138.1.7 or later.
Servers with automatic daily updates should receive the patch automatically.
What Should Administrators Do?
First, make sure cPanel is running a patched build.
Administrators can also force an update with:
/scripts/upcp --force
The update can also be installed through WHM.
In addition, servers running end-of-life versions should move to a supported release.
Finally, review hosting accounts that can manage parked or addon domains. If anything looks suspicious, investigate the server further.
Key Takeaway
CVE-2026-65643 is a serious cPanel flaw because it can let one hosting account gain root access.
On shared hosting servers, the impact could be severe because one customer may affect the entire system.
For this reason, administrators should update cPanel immediately and limit access to domain management features where possible.
Source: https://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.html