CPanel & WebHost Manager (< 11.138.0.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/cpanel--webhost-manager--11.138.0.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 29 Aug 2026 03:13:20 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCVE-2026-65643 Vulnerability in cPanel Domain Parkinghttps://feed.craftedsignal.io/briefs/2026-08-cpanel-vulnerability/Sat, 29 Aug 2026 03:13:20 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-cpanel-vulnerability/A vulnerability in cPanel & WebHost Manager (WHM) Domain Parking functionality identified as CVE-2026-65643 requires urgent patching to prevent potential system compromise.On August 27, 2026, cPanel disclosed a security vulnerability, CVE-2026-65643, affecting the Domain Parking functionality within its cPanel & WebHost Manager (WHM) software. This flaw poses a risk to administrators managing web hosting environments, as unauthenticated or local attackers could potentially leverage the vulnerability to impact the confidentiality, integrity, or availability of the underlying server. Impacted versions include all releases prior to 11.110.0.141, 11.134.0.53, 11.136.0.37, 11.138.0.2, and 11.138.1.7 (WP2). Organizations utilizing affected versions should immediately evaluate their exposure and apply the vendor-provided security patches to mitigate potential unauthorized access or service disruption.

Impact

Successful exploitation of CVE-2026-65643 may allow an attacker to bypass intended security controls within the Domain Parking feature. While specific exploit primitives remain restricted, this could lead to unauthorized resource modification or information disclosure. The vulnerability affects a broad range of cPanel & WHM deployments, making it a critical priority for managed service providers and hosting administrators to secure their infrastructure.

Recommendation

Prioritized actions for administrators and security teams:

  • Upgrade all instances of cPanel & WebHost Manager to the patched versions: 11.110.0.141, 11.134.0.53, 11.136.0.37, 11.138.0.2, or 11.138.1.7 (WP2) as specified in the cPanel security advisory.
  • Review the cPanel support portal for specific release notes regarding CVE-2026-65643 to identify any additional configuration changes required beyond the patch.
  • Audit current Domain Parking configurations on public-facing servers for any unusual activity or modifications recorded since the release of the advisory.
]]>highadvisory