{"uuid": "7bf04a3a-e6ca-415b-b758-c1c6eba9a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html", "content": "cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries.\n\nThe database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects", "creation_timestamp": "2026-08-05T01:00:34.024500Z"}