CVE-2026-58047

Published on July 31, 2026

HTTP Smuggling in cPanel allows potential leak of credentials.

Weakness type (CWE)CWE-444

From a parked domain to server root: the critical flaw in cPanel/WHM

CVE-2026-65643 is a critical flaw in cPanel/WHM allowing privilege escalation to root. Immediate updates are required to prevent server compromise.

This product uses the NVD API but is not endorsed or certified by the NVD.