WH
Product
Whm
On CISA KEVExploited in the wildRansomware-linked
5
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Whm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41940 RansomwareIn wildKEV | 9.8 | Apr 29 | WebPros cPanel and WHM Authentication Bypass via Login Flow Affected: 11.40 before 86.0.41; 88.0.0 before 110.0.97; 112.0.0 before 118.0.63; 120.0.0 before 124.0.35; 126.0.1 before 126.0.54; 128.0.0 before 130.0.19; +3 more |
| CVE-2026-29205 | 8.6 | May 13 | Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints Affected: 120.0.0 before 124.0.38; 126.0.0 before 126.0.59; 130.0.0 before 130.0.23; 132.0.0 before 132.0.32; 134.0.0 before 134.0.26; 136.0.0 before 136.0.10 |
| CVE-2026-32992 | 8.2 | May 13 | SSL verification is disabled in the DNS Cluster system Affected: 126.0.0 before 126.0.59; 130.0.0 before 130.0.23; 132.0.0 before 132.0.32; 134.0.0 before 134.0.26; 136.0.0 before 136.0.10 |
| CVE-2012-6449 | 5.4 | Feb 10 | The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability Affected: 11.34.0 |
| CVE-2017-11441 | 5.4 | Jul 19 | The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a… Affected: through 56.0.50; 58.0.3; 58.0.4; 58.0.5; 58.0.6; 58.0.7; +34 more |
Showing 5