Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM

Security advisory: Three vulnerabilities were disclosed in cPanel & WHM and WP Squared — two high-severity (CVSS 8.8) issues allowing Perl code injection and unsafe symlink handling that can lead to remote code execution, denial-of-service, or privilege escalation, and one moderate (CVSS 4.3) arbitrary file-read flaw that can expose sensitive files. Administrators are instructed to update to the listed patched versions (and WP Squared 11.136.1.10+), with special updates provided for CentOS/CloudLinux 6 environments; update commands and verification steps are included.