Tag: database vulnerability

2 articles

Rows of rack-mounted servers and storage systems in a brightly-lit data center with a single workstation in the foreground.

cPanel Flaw Exposes Database Vulnerability to Authenticated Users

A critical cPanel flaw, CVE-2026-58048, with a near-perfect CVSS score of 9.4, allows authenticated users to execute SQL commands with root-level access, putting databases at risk. This vulnerability lets users with basic cPanel access escalate privileges and take control of the server's administrative database.

Analyst 207
Rows of computer servers and storage systems in a brightly-lit cloud data center or server room with ambient lighting.

Azure Flaw Exposes Platform-Wide Key to All Databases

Microsoft patched a vulnerability in Azure Cosmos DB, dubbed CosmosEscape, which exposed a platform-wide key to all databases, but fortunately, no customer data was accessed and no action is required. The flaw was discovered by security firm Wiz, which detailed the exploit chain that could be used to take advantage of the vulnerability.

Analyst 207