{"id":10001,"date":"2026-09-23T13:12:04","date_gmt":"2026-09-23T13:12:04","guid":{"rendered":"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/09\/23\/new-cpanel-flaw-lets-a-hosting-account-run-code-as-root-take-full-server-control\/"},"modified":"2026-09-23T13:12:04","modified_gmt":"2026-09-23T13:12:04","slug":"new-cpanel-flaw-lets-a-hosting-account-run-code-as-root-take-full-server-control","status":"publish","type":"post","link":"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/09\/23\/new-cpanel-flaw-lets-a-hosting-account-run-code-as-root-take-full-server-control\/","title":{"rendered":"New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control"},"content":{"rendered":"<p>\u200bA flaw in cPanel&#8217;s\u00a0CalDAV and CardDAV service\u00a0lets anyone with a cPanel hosting account run code as root and take &#8220;full control of the server,&#8221; the company said on September 22.<\/p>\n<p>A\u00a0second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts.<\/p>\n<p>cPanel has released fixed versions for both,\u00a0A flaw in cPanel&#8217;s\u00a0CalDAV and CardDAV service\u00a0lets anyone with a cPanel hosting account run code as root and take &#8220;full control of the server,&#8221; the company said on September 22.<\/p>\n<p>A\u00a0second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other accounts.<\/p>\n<p>cPanel has released fixed versions for both,\u00a0\u00a0The Hacker News<\/p>","protected":false},"excerpt":{"rendered":"<p>\u200bA flaw in cPanel&#8217;s\u00a0CalDAV and CardDAV service\u00a0lets anyone with a cPanel hosting account run code as root and take &#8220;full control of the server,&#8221; the company said on September 22. A\u00a0second bug in the WP Toolkit plugin, used to install and manage WordPress sites, allows an account holder to change databases that belong to other&hellip;&nbsp;<a href=\"https:\/\/news.cybertechworld.co.in\/index.php\/2026\/09\/23\/new-cpanel-flaw-lets-a-hosting-account-run-code-as-root-take-full-server-control\/\" class=\"\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control<\/span><\/a><\/p>\n","protected":false},"author":0,"featured_media":10002,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/10001"}],"collection":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/comments?post=10001"}],"version-history":[{"count":0,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/10001\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media\/10002"}],"wp:attachment":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media?parent=10001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/categories?post=10001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/tags?post=10001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}