CVE-2016-10831

CVE-2016-10831 describes a critical authentication bypass vulnerability in cPanel versions prior to 55.9999.141, where the two-factor authentication check was not enforced when an attacker had already compromised one account and attempted to "possess" another. This flaw carries a CVSSv3 score of 7.2 (HIGH), indicating that an attacker with high privileges can exploit it over the network with low complexity to achieve high confidentiality, integrity, and availability impacts. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.