Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PoC for CVE-2026-67401: cPanel/WHM EmailTrack SQL Injection Leading to Root RCE

github.com | tool | CVE-2026-67401 | #cloud | #rce | #red-team

Summary

This repository provides a comprehensive proof-of-concept and local testing lab for CVE-2026-67401, a critical SQL injection vulnerability in cPanel & WHM's EmailTrack functionality. Authenticated users with email-level privileges can inject malicious SQL via the account parameter to execute SELECT ... INTO OUTFILE, dropping a web shell into the document root to achieve remote code execution and escalate privileges to root.

Why it matters

cPanel is widely used in shared web hosting environments. This vulnerability allows low-privileged tenants with mail permissions to achieve full host takeover as root. Administrators should urgently patch cPanel to the latest builds across all supported series.
CVE
CVE-2026-67401
Vendor
cPanel
Product
cPanel & WHM
Affected versions
< 11.110.0.143, < 11.134.0.55, < 11.136.0.39, < 11.138.0.4, < 11.138.1.9
Published
Collected

original ↗

Related coverage

tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
Critical · vulnerability · github.com
CVE-2026-60004: Gitea diffpatch Git Hook Installation Remote Code Execution Exploit PoC
When self-registration is enabled, any unauthenticated attacker can create an account and immediately achieve host-level remote code execution on self-hosted Gitea instances.
tool · github.com
Linux LPE Toolkit: Multi-Architecture Automated Privilege Escalation Tool
Provides penetration testers and red teams with an all-in-one, multi-architecture automated post-exploitation toolkit that simplifies Linux kernel privilege escalation without requiring on-target compilers.
tool · github.com
Linux Container Escape PoCs for CVE-2026-52910 & CVE-2026-80521
Demonstrates that container isolation can be completely compromised via Linux kernel subsystem flaws, providing security researchers with reproducible testbeds to evaluate kernel-level container escape threats.
High · vulnerability · github.com
WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)
While remote code execution depends on runtime prerequisites like PEAR, the unauthenticated LFI primitive resides directly in WordPress Core and affects all major branches from 4.7.0 through 7.1.1.
back