Live › vulnerability › CVE-2026-105476
cPanel has an improper link resolution flaw before file access that lets an authenticated remote user write arbitrary root-owned files. An attacker who gets an account can use this to escalate privileges on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 21:35 UTC. All times on this page are UTC.
Servers running cPanel where users hold authenticated accounts are the exposed systems. Servers without cPanel, or where only fully trusted administrators have logins, are less exposed. The sources do not give the affected versions or the specific configuration.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-105476")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.