{"uuid": "21fc4284-ad54-487b-bca2-659be011d926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48979", "content": "CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating \ud83d\udd25\n\nA vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/dIEpd\n\ud83d\udc49 Dork: http.title:cpanel OR http.headers.set_cookie:\"cprelogin\" OR http.headers.set_cookie:\"cpsession\"\n\nVendor's advisory:\nhttps://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026", "creation_timestamp": "2026-09-10T18:00:05.880025Z"}