This vulnerability (CVE-2026-58048) in WebPros cPanel involves improper preservation of the SQL mode during database renaming operations. This flaw enables an attacker with limited privileges to execute arbitrary SQL commands in the context of the root database user, potentially leading to full compromise of the database system. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, availability, scope, and security requirements. The affected versions are explicitly listed, but no vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker to execute arbitrary SQL commands with root privileges on the database, potentially leading to full compromise of the database contents and system integrity. This poses a critical risk to confidentiality, integrity, and availability of data managed by cPanel instances running the affected versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications closely and consider restricting access to the database renaming functionality or limiting privileges of users who can perform such operations.