HIGH

CVE-2026-105476

Published 2026-11-02 CVSS v3.1
View on NVD View on MITRE Check if this affects your version
CVSS Score
8.8

Description

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.

Weakness Classification (CWE)

CWE-59 Link Following (Symlink)

References

https://support.cpanel.net/hc/en-us/articles/44356595655703-Security-CVE-2026-105476-Arbitrary-File-Write-as-Root-in-cPanel-WHM-October-20th-2026

Primary Sources

Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.

NVD — NIST Official CVE enrichment, CVSS, CPE
MITRE CVE Program Official CVE record of authority

Does this affect your version?

Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.

Open Detector
Back to CVE Dashboard Search Other CVEs
CVE data aggregated from the National Vulnerability Database (NVD, public domain) and enriched by dbcve.org.