11.138.0[.]8IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control“11.138.0[.]8 or later”
Indicators reported together
named in the same reports- 11.134.0[.]57in 1 report
- 11.136.0[.]41in 1 report
- 11.138.1[.]11in 1 report
- hxxps://wp-toolkit.plesk[.]com/cPanel/installer.shin 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-87899, CVE-2026-87900, CVE-2026-68490
Thanks — we review every report.