LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Cpanel

3 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical0
High3
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-656438.8highcpanelEval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as roo53d ago
CVE-2026-292058.6highcpanelIncorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the163d ago
CVE-2026-329928.2highcpanelSSL verification is disabled in the DNS Cluster system.163d ago

Filter the full tracker by Cpanel →

Our coverage of Cpanel

vulnerabilityhigh

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis has issued a warning about a high-severity local privilege escalation vulnerability, identified as CVE-2026-87886, affecting its backup plugins for cPanel & WHM and Plesk. The company states that this flaw is being actively exploited in targeted attacks.