Vulnerability Overview Item Detail CVE ID CVE-2026-67401 Component cPanel & WHM — EmailTrack (Email ▸ Track Delivery) Vulnerability class CWE-89 (SQL Injection) Disclosure date September 8, 2026 (cPanel advisory), CVE record published September 9, 2026 Discovered by Ali Mustafa (reported via Hack...
Source: [Dev.to](https://dev.to/guidance_white/cve-2026-67401-analysis-cpanel-whm-emailtrack-sql-injection-from-mail-account-to-root-3e45)