New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server

<p>cPanel has disclosed CVE-2026-67401, a critical SQL injection flaw in EmailTrack that could let authenticated attackers gain root-level control of vulnerable servers. cPanel disclosed the security issue on September 8, 2026. According to cPanel, an attacker must already possess a valid cPanel account with mail-related privileges to exploit the vulnerability. While this requirement limits unauthenticated [&#8230;]</p> <p>The post <a href="https://cybersecuritynews.com/cpanel-sql-injection-vulnerability/">New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server</a> appeared first on <a href="https://cybersecuritynews.com">Cyber Security News</a>.</p>