CVE-2026-65643: Eval injection in cPanel 11.138.0.0 and earlier allows

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

• EPSS 0.9% (57.9% percentile)
• CVSS 8.7 high

Related briefings

• Critical cPanel bug hands one customer the whole server 2026-08-29

Browse the CVE database

Read the full analysis on IntelFusions