AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.