High · 8.8 CVE-2026-105476 EUVD-2026-115631GHSA-7j4p-q48v-2wqx

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate pr…

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by hackerone

Description

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.

Vendor	Product	Affected	Fixed
WebPros	cPanel	< 11.138.0.19, < 11.136.0.51, < 11.134.0.67, < 11.110.0.154	11.138.0.19