Exploited vulnerability tracking

One shared-hosting customer can take root on a whole cPanel server through parked domains

cPanel shipped fixes for CVE-2026-65643 on August 27 across four build branches. Administrators checking their own build get no CVSS score, no published CVE record and nothing to grep for prior abuse.