CVE-2026-67401

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

Published Sep 9, 2026
CVSS 9.9 critical
0.9% chance of exploitation in the next 30 days (EPSS)

Affected software

WebPros cPanel

CVE-2026-67401 at the National Vulnerability Database