Vulnerability intelligence

CVE-2026-67401

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

CVSS Score

9.9

Critical

EPSS — Exploit Probability

0.9%

Riskier than 58% of all CVEs · checked 2026-10-22

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Unconfirmed

Check vendor advisories

2 articles across 2 outlets · first covered Sep 9, 2026 · latest Sep 9, 2026

Coverage timeline