[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUJhSdNJxb7sjqP4BXTfbocNp2b0mugGAH1VbcXYqT3Q":3},{"article":4,"iocs":43,"watch_terms":51,"solutions":52,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"79536646-9d0b-4a8c-8e9a-1d6a697d489f","New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root","new-cpanel-critical-flaw-could-let-hosting-customers-run-sql-as-database-root-df5a94","cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects","cPanel released security patches for CVE-2026-58048, a critical privilege escalation vulnerability affecting all supported versions of cPanel & WHM and WP Squared. The flaw allows authenticated hosting customers with MySQL\u002FMariaDB access to execute arbitrary SQL commands with full database administrative privileges, potentially leading to OS-level compromise. Three other vulnerabilities were patched in the same release, including an HTTP request-smuggling issue (CVE-2026-58047) and an Exim unsafe string expansion bug.","cPanel patches critical privilege escalation flaw allowing authenticated users to execute SQL as database root.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fnew-cpanel-critical-flaw-could-let.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi2LFB09rf16kl1_PinOnHkAY4GiI38_azQ2t-EWYRicFndp5DX-5KSfwVVEJxwEKp07oouBfkFg71MxwilLY_M2i3clk82hs5-Xr-PgDj69JeYzTsPjp_8sdNZIminQFonHRq2GqWDXJuwGqpT4Na485_pILlvMSlBdSMqWYWqTHDrUC_9OdOW-kCdSeM\u002Fs1600\u002Fcpanel.jpg","2026-08-04T10:36:27+00:00","2026-08-04T12:00:19.964317+00:00",9,[17,20,22,24,27],{"name":18,"type":19},"cPanel & WHM","product",{"name":21,"type":19},"WP Squared",{"name":23,"type":19},"Exim",{"name":25,"type":26},"MySQL\u002FMariaDB","technology",{"name":28,"type":29},"cPanel Inc.","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},[44,48],{"type":45,"value":46,"context":47},"cve","CVE-2026-58048","cPanel privilege escalation allowing SQL execution as database root (CVSS 9.4)",{"type":45,"value":49,"context":50},"CVE-2026-58047","cpsrvd HTTP request-smuggling vulnerability enabling credential leakage (CVSS 5.6)",[28,18,21],{"controls":53,"vendors":136},[54,82,111],{"slug":55,"name":56,"problem":57,"products":58},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":55,"product_name":79,"url":80,"description":81},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":83,"name":84,"problem":85,"products":86},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":112,"name":113,"problem":114,"products":115},"patch-management","Automated patch management","Known holes get closed in days, not months.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":112,"product_name":133,"url":134,"description":135},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":155},"critical-cpanel-flaw-lets-tenants-escalate-to-database-root","Critical cPanel Flaw Lets Tenants Escalate to Database Root","A critical privilege escalation vulnerability in cPanel & WHM (CVE-2026-58048) allowed authenticated hosting customers — who should operate within strictly limited tenant boundaries — to execute arbitrary SQL commands with full database administrative privileges. The root cause is improper enforcement of least-privilege principles at the database layer, meaning user-level MySQL\u002FMariaDB access was not adequately sandboxed from root-level operations. This is particularly dangerous in shared hosting environments where hundreds of unrelated customers share the same underlying infrastructure, as one compromised or malicious tenant could pivot to OS-level control. The bundled HTTP request-smuggling and Exim vulnerabilities in the same release underscore the compounding risk of delaying patch cycles on complex, multi-service hosting control panels.",[142,143,144,145,146,147,148,149,150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management","CIS Control 5: Account Management (Least Privilege)","CIS Control 8: Audit Log Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AU-12: Audit Record Generation","NIST SP 800-53 CM-6: Configuration Settings","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","OWASP Top 10 A01:2021 – Broken Access Control","PCI DSS Requirement 6.3: Security Vulnerabilities Addressed via Patching","PCI DSS Requirement 7.1: Limit Access to System Components","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities","ITIL Change Management: Emergency Change Procedures",{}]