CVE-2026-110677 | Cpanel::JSON::XS up to 4.79 Duplicate Key decode_hv memory leak

October 19, 2026 Yanac

A vulnerability classified as problematic has been found in Cpanel::JSON::XS up to 4.79. The affected element is the function decode_hv of the component Duplicate Key Handler. Performing a manipulation results in memory leak.

This vulnerability is known as CVE-2026-110677. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More