๐Ÿ” CVE Alert

CVE-2026-65643

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

CWE CWE-95
Vendor webpros
Product cpanel
Published Sep 1, 2026
Stay Ahead of the Next One

Get instant alerts for webpros cpanel

Be the first to know when new unknown vulnerabilities affecting webpros cpanel are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

WebPros / cPanel
0 < 11.110.0.141 11.112.0.0 < 11.134.0.53 11.136.0.0 < 11.136.0.37 11.138.0.0 < 11.138.0.2 11.138.1.0 < 11.138.1.7

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.cpanel.net: https://support.cpanel.net/hc/en-us/articles/42959571221527-Security-CVE-2026-65643-Park-API-Vulnerability-August-27-2026

Credits

๐Ÿ” Ali Mustafa