CVE-2026-105476: High severity vulnerability
Published Nov 2, 2026
·Updated
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.
Event History
Nov 2, 2026
CVE Published
via NVD·09:17 PM
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need before exploiting this issue?
The attacker must be remotely authenticated. The provided information does not indicate that unauthenticated users can exploit it.
2
Does exploitation require a victim or administrator to perform an action?
No user interaction is required, according to the CVSS vector (UI:N).
3
What is the potential impact after successful exploitation?
An attacker can write arbitrary files owned by root and escalate privileges. The reported impact includes high confidentiality, integrity, and availability impact.