Webpros Cpanel vulnerabilities

• webpros cpanel Improper link resolution before file access in cPanel allows remote authenticated users to write... CVE-2026-105476 8.8 HighNovember 2, 2026
• webpros cpanel Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account... CVE-2026-105475 8.7 HighNovember 2, 2026
• webpros cpanel, wp squared +1 more There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts... CVE-2026-93029 9.0 CriticalOctober 2, 2026
• webpros cpanel, wp squared +1 more There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify... CVE-2026-93697 9.0 CriticalOctober 2, 2026
• webpros cpanel, wp squared +1 more Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. CVE-2026-93698 9.9 CriticalOctober 2, 2026
• webpros wp toolkit for cpanel Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated... CVE-2026-87900 9.4 CriticalSeptember 23, 2026
• webpros cpanel Execution with unnecessary privileges in cPanel allows remote authenticated users to execute... CVE-2026-87899 9.4 CriticalSeptember 23, 2026
• webpros cpanel Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information... CVE-2026-68490 8.2 HighSeptember 23, 2026
• webpros cpanel A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root... CVE-2026-67401 Public exploit 9.9 CriticalSeptember 9, 2026
• cpanel Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute... CVE-2026-65643 Public exploit 8.7 HighSeptember 1, 2026
• webpros cpanel, wp squared +1 more Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in... CVE-2026-58048 Public exploit 9.4 CriticalJuly 31, 2026
• webpros cpanel, wp squared +1 more HTTP Smuggling in cPanel allows potential leak of credentials. CVE-2026-58047 5.6 MediumJuly 31, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Improper authorization checks of team members privileges allow a team member to escalate... CVE-2026-32991 7.1 HighMay 13, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL... CVE-2026-29206 8.1 HighMay 13, 2026
• webpros cpanel, wp squared +1 more Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint... CVE-2026-32993 8.3 HighMay 13, 2026
• cpanel, cpanel whm, wp squared +2 more SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server... CVE-2026-32992 8.2 HighMay 13, 2026
• cpanel, cpanel whm, wp squared +2 more Incorrect privileges management and insufficient path filtering allow to read arbitrary file on... CVE-2026-29205 8.6 HighMay 13, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing... CVE-2026-29203 5.3 MediumMay 8, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows... CVE-2026-29202 5.3 MediumMay 8, 2026
• webpros cpanel, cpanel (cloudlinux 6, centos 6), wp squared +2 more Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin... CVE-2026-29201 8.6 HighMay 8, 2026
• cpanel, cpanel whm, wp squared +1 more +3 more WebPros cPanel and WHM Authentication Bypass via Login Flow CVE-2026-41940 In KEVPublic exploit EPSS 98.5% 9.3 CriticalApril 29, 2026