New cPanel Vulnerability Allows Hosting Accounts with Mail Privileges to Execute Code as Root
cPanel patched a vulnerability that may allow an authenticated hosting account with mail-related privileges to create files of its choosing on the server and execute code through them as the root user. This could provide control over the entire server.
CERT24