CVE-2026-580489.4CriticalCWE-89
CVE-2026-58048: WebPros cPanel vulnerability
WebPros · cPanel
Vendor fix available · Affected: WebPros cPanel · Exploitation: public proof of concept (unverified)
ExploitationProof of concept public
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public2 public GitHub repositories (unverified), listed by PoC-in-GitHub4 Aug
- Not established: not seen
0.6%probability of exploitation in the next 30 days
47th percentile
050100
Higher than 47% of scored CVEs
9.4CriticalCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Weakness
- SQL Injection
- Vendor
- WebPros
- Published
- July 2026
What changed
- PoC-in-GitHub lists 2 public GitHub repositories (unverified) PoC-in-GitHub
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 4 Aug.
Quiet for 15 weekslast report 4 Aug2 articles2 outlets
- Tue 4 Aug, 02:12 UTC. SecurityOnline, first report. cPanel fixes high risk SQL bug CVE-2026-58048 in shared hosting.
- Tue 4 Aug, 13:13 UTC. Security Affairs, its first report on the story. Critical cPanel flaw (CVE-2026-58048) lets users run SQL as root.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 4 Aug 02:12 | SecurityOnline | cPanel fixes high risk SQL bug CVE-2026-58048 in shared hosting |
| 4 Aug 13:13 | Security Affairs | Critical cPanel flaw (CVE-2026-58048) lets users run SQL as root |
- Critical cPanel flaw (CVE-2026-58048) lets users run SQL as rootSecurity Affairs
- cPanel fixes high risk SQL bug CVE-2026-58048 in shared hostingSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.