EIP-2026-106213

This is a CSRF exploit targeting Cpanel 11.X that allows an attacker to change the email address associated with a cPanel account by tricking a victim into submitting a malicious form. The exploit leverages hidden form fields to modify email settings without user interaction.