CVE Alert & Security Feed

Stats Digest Feeds

← Back to all CVEs

CVE-2026-67401

CRITICAL NVD

CVSS Score 9.9

Severity CRITICAL

Published Sep 09, 2026

Vendor unknown

Description

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

References

https://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026