CVE-2026-110685 | Cpanel JSON XS up to 4.79 Thaw decode_tag memory leak

October 19, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Cpanel JSON XS up to 4.79. This affects the function decode_tag of the component Thaw. The manipulation leads to memory leak.

This vulnerability is uniquely identified as CVE-2026-110685. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More