security_identifier

CVE-2026-67401

Vulnerability identifier assigned to an SQL injection issue in the EmailTrack component of cPanel and WHM.

Current clusters

cPanel patches an EmailTrack injection that carries a mail-privileged tenant to root

cPanel says every supported build of cPanel and WHM is affected by CVE-2026-67401, and its September 8 advisory arrived without a severity score or any interim step for hosts that cannot take the upgrade yet.

Publishers:thehackernews.com

Reality

Evidence62
Adoption: Insufficient
Hype gap−5
Incentives58
Confidence60