CVE-2026-93698

Name of the Vulnerable Software and Affected Versions cPanel & WHM (affected versions not specified)

Description Insufficient validation in the Multilang adminbin allows for the execution of arbitrary commands, which can grant root-level access to the server. Additionally, stored Cross-Site Scripting (XSS)—a technique where malicious scripts are permanently stored on a target server—exists within the SSL and account modification interfaces, enabling attackers to perform actions via an administrator's browser session.

Recommendations Upgrade all supported versions to the patched releases. Tighten firewall configurations, use a VPN, and enable Multi-Factor Authentication (MFA). Limit the rights of lower-privilege accounts.