cPanel prior to 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).
cpanel cpanel