{"document":{"aggregate_severity":{"text":"hoch"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"cPanel ist eine Software für die Verwaltung von Webhosting Auftritten. Die Software ermöglicht es dem Endanwender, Statistiken einzusehen, neue Benutzeraccounts anzulegen, Maileinstellungen zu verändern und vieles mehr.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in cPanel cPanel/WHM ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.","title":"Angriff"},{"category":"general","text":"- Linux\n- UNIX","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-3277 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3277.json"},{"category":"self","summary":"WID-SEC-2026-3277 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3277"},{"category":"external","summary":"cPanel Security Advisory vom 2026-09-08","url":"https://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026"}],"source_lang":"en-US","title":"cPanel cPanel/WHM: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","tracking":{"current_release_date":"2026-09-09T22:00:00.000+00:00","generator":{"date":"2026-09-10T11:38:16.083+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-3277","initial_release_date":"2026-09-08T22:00:00.000+00:00","revision_history":[{"date":"2026-09-08T22:00:00.000+00:00","number":"1","summary":"Initiale Fassung"},{"date":"2026-09-09T22:00:00.000+00:00","number":"2","summary":"Referenz(en) aufgenommen: EUVD-2026-75062"}],"status":"final","version":"2"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version_range","name":"<v11.110.0.143","product":{"name":"cPanel cPanel/WHM <v11.110.0.143","product_id":"T059249"}},{"category":"product_version","name":"v11.110.0.143","product":{"name":"cPanel cPanel/WHM v11.110.0.143","product_id":"T059249-fixed","product_identification_helper":{"cpe":"cpe:/a:cpanel:cpanel_whm:v11.110.0.143"}}},{"category":"product_version_range","name":"<v11.134.0.55","product":{"name":"cPanel cPanel/WHM <v11.134.0.55","product_id":"T059250"}},{"category":"product_version","name":"v11.134.0.55","product":{"name":"cPanel cPanel/WHM v11.134.0.55","product_id":"T059250-fixed","product_identification_helper":{"cpe":"cpe:/a:cpanel:cpanel_whm:v11.134.0.55"}}},{"category":"product_version_range","name":"<v11.136.0.39","product":{"name":"cPanel cPanel/WHM <v11.136.0.39","product_id":"T059251"}},{"category":"product_version","name":"v11.136.0.39","product":{"name":"cPanel cPanel/WHM v11.136.0.39","product_id":"T059251-fixed","product_identification_helper":{"cpe":"cpe:/a:cpanel:cpanel_whm:v11.136.0.39"}}},{"category":"product_version_range","name":"<v11.138.0.4","product":{"name":"cPanel cPanel/WHM <v11.138.0.4","product_id":"T059252"}},{"category":"product_version","name":"v11.138.0.4","product":{"name":"cPanel cPanel/WHM v11.138.0.4","product_id":"T059252-fixed","product_identification_helper":{"cpe":"cpe:/a:cpanel:cpanel_whm:v11.138.0.4"}}},{"category":"product_version_range","name":"WP2 <v11.138.1.9","product":{"name":"cPanel cPanel/WHM WP2 <v11.138.1.9","product_id":"T059296"}},{"category":"product_version","name":"WP2 v11.138.1.9","product":{"name":"cPanel cPanel/WHM WP2 v11.138.1.9","product_id":"T059296-fixed","product_identification_helper":{"cpe":"cpe:/a:cpanel:cpanel_whm:wp2__v11.138.1.9"}}}],"category":"product_name","name":"cPanel/WHM"}],"category":"vendor","name":"cPanel"}]},"vulnerabilities":[{"cve":"CVE-2026-67401","product_status":{"known_affected":["T059250","T059252","T059296","T059251","T059249"]},"release_date":"2026-09-08T22:00:00.000+00:00","title":"CVE-2026-67401"}]}