Improper Authorization in cPanel/WHM Affects Team Member Privileges

CVE-2026-32991

What is CVE-2026-32991?

This vulnerability allows unauthorized escalation of privileges within cPanel/WHM, where team members can gain elevated access rights, potentially compromising sensitive accounts. The issue stems from inadequate checks on team member privileges, enabling a member to act as a team owner. It is essential for users to apply the latest security updates to protect against this risk and secure their environments.

References