ANALYZED This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.
Description Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled.
A SQL injection vulnerability has been identified in the cPanel and WHM sqloptimizer utility script. This issue arises from inadequate sanitization of SQL queries, allowing arbitrary SQL injection on behalf of the root user when Slow Query logging is enabled. The vulnerability affects all cPanel & WHM versions.
Users can update to cPanel versions 11.86.0.44 and higher, 11.94.0.31 and higher, 11.102.0.42 and higher, 11.110.0.118 (cl6110), 11.110.0.119 and higher, 11.118.0.67 and higher, 11.124.0.38 and higher, 11.126.0.59 and higher, 11.130.0.23 and higher, 11.132.0.32 and higher, 11.134.0.26 and higher, or 11.136.0.10 and higher. For customers on CentOS 6 or CloudLinux 6, it is recommended to set the upgrade tier to cl6110 and then follow the update instructions.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 13, 2026 Exploitation: NoneAutomatable: YesTechnical Impact: Total
CISA-ADP
Assessed May 14, 2026 Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') [email protected]
Affected Products Product Versions cPanel All versions
CPE cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* Remediation Upgrade: 11.86.0.44moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.94.0.31moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.102.0.42moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.110.0.118 (cl6110)moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.110.0.119moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.118.0.67moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.124.0.38moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.126.0.59moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.130.0.23moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.132.0.32moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.134.0.26moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.136.0.10moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
cPanel WHM All versions
CPE cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* cpe:2.3:a:cpanel:webhost_manager:*:*:*:*:*:*:*:* Remediation Upgrade: 11.110.0.119moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.86.0.44moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.94.0.31moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.102.0.42moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.110.0.118 (cl6110)moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.118.0.67moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.124.0.38moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.126.0.59moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.130.0.23moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.132.0.32moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.134.0.26moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
Upgrade: 11.136.0.10moderate effort Run the command:
/scripts/upcp --force
Verify the update with:
/usr/local/cpanel/cpanel -V
cPanel WP2 All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Change History 3 change records found show changes
Volerion