cPanel Patches a Root-Level Flaw in Domain Parking: One Customer Account With Domain Permissions Was Enough

cPanel has patched a vulnerability that turned one of shared hosting’s most routine features into a route to full server takeover. In an advisory published on August 27, an authenticated cPanel account holder able to add parked or addon domains could create arbitrary files on the server, and “successful exploitation leads to code execution as the root user, giving an attacker full control of the…