{"uuid": "31634e8c-f976-4b87-9c69-2d11b127b3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58048", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117037107918679023", "content": "\u26a0\ufe0f PATCH NOW\ncPanel patched a critical flaw (CVE-2026-58048, CVSS 9.4): a hosting account can run SQL as database root by renaming a database.\nOne hijacked account can then reach the whole shared server.\nNo exploit yet. Patch now.\nhttps://suriq.io/blog/cpanel-cve-2026-58048-database-root-escalation\n#CVE #infosec #cybersecurity", "creation_timestamp": "2026-08-04T13:31:21.426222Z"}