cPanel root vulnerability exposes shared-hosting isolation flaws
The newly disclosed cPanel root vulnerability (CVE-2026-87899) lets any hosting account execute code as root, forcing operators to rethink shared-hosting.
cloud infrastructure
2 stories
VeloCloud Orchestrator CVE-2026-93952 Actively Exploited in Certificate-Based Deployments
Arista confirms active exploitation of VeloCloud Orchestrator CVE-2026-93952, a CVSS 10.0 remote code path targeting certificate-authenticated Edge devices.