cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333).
CVE Status: Modified
No CVSS data available
Exploit-db Github