{"id":"CVE-2026-93698","published":"2026-10-02T07:16:39.027","lastModified":"2026-10-02T19:16:42.917","description":"Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://docs.cpanel.net/changelogs/110-change-log/#1100148","tags":[]},{"url":"https://docs.cpanel.net/changelogs/134-change-log/#134061","tags":[]},{"url":"https://docs.cpanel.net/changelogs/136-change-log/#136045","tags":[]},{"url":"https://docs.cpanel.net/changelogs/138-change-log/#138011","tags":[]},{"url":"https://docs.wpsquared.com/changelogs/versions/changelog/#138113","tags":[]},{"url":"https://hackerone.com/reports/4054291","tags":[]},{"url":"https://support.cpanel.net/hc/en-us/articles/43845931719447-Security-CVE-2026-93698-Vulnerability-in-Multilang-Adminbin-September-29-2026","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw allows arbitrary commands to be executed via the Multilang adminbin due to insufficient validation, posing a critical risk.","exploitability":"Exploitation is relatively straightforward given the lack of validation, requiring an attacker to craft and send malicious input.","blast_radius":"If exploited, this flaw could lead to complete system compromise and potential data loss or manipulation.","remediation":"Disable the Multilang adminbin feature or restrict access to it strictly.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","admin","web","validation"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:41:26.655Z"}}