Arbitrary File Write Vulnerability in cPanel by cPanel, Inc.

CVE-2026-105476

What is CVE-2026-105476?

A flaw in cPanel allows remote authenticated users to exploit improper link resolution before file access, enabling them to write arbitrary files with root ownership. This vulnerability poses significant risks as it can lead to privilege escalation, potentially allowing unauthorized access to system controls and sensitive data.

References