CVE-2026-110673 | cPanel Cpanel::JSON::XS up to 4.79 JSON Decoder decode_tag allow_tags stack-based overflow

October 19, 2026 Yanac

A vulnerability identified as problematic has been detected in cPanel Cpanel::JSON::XS up to 4.79. This affects the function decode_tag of the component JSON Decoder. The manipulation of the argument allow_tags leads to stack-based buffer overflow.

This vulnerability is documented as CVE-2026-110673. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More