Description (CNA)
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WebPros / cPanel | affected 0 before 11.110.0.137; affected 0 before 11.126.0.78; affected 0 before 11.134.0.48; affected 0 before 11.136.0.32; affected 0 before 11.137.9999.99; affected 0 before 11.118.0.71 |
| WebPros / WP Squared | affected 0 before 11.138.1.6 |
CWE
CWE-89
References
- https://support.cpanel.net/hc/en-us/articles/42285745783703-CVE-2026-58048-Database-Privilege-Escalation
- https://docs.cpanel.net/changelogs/138-change-log
ADP enrichment
No English description supplied.
No references supplied.