CVE-2026-110674 | cPanel Cpanel::JSON::XS up to 4.79 Duplicate Key decode_hv type confusion

October 19, 2026 Yanac

A vulnerability marked as critical has been reported in cPanel Cpanel::JSON::XS up to 4.79. This issue affects the function decode_hv of the component Duplicate Key Handler. This manipulation causes type confusion.

This vulnerability appears as CVE-2026-110674. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More