CVE-2026-67401
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component
- Affected products
- Cpanel
- CVSS 3.0
- 9.9 CRITICAL
- EPSS
- 1.0% (60th percentile)
- Weakness
- CWE-89
- NVD status
- Awaiting Analysis
- Published
- 2026-09-09
CVE-2026-67401 at NVD
5 known exploits for CVE-2026-67401
Proof-of-concept code and exploit modules indexed by Sploitus