cPanel prior to 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).
cpanel cpanel