Login Request a demo
WH
Product
Whm
by Cpanel · last CVE May 13, 2026
On CISA KEVExploited in the wildRansomware-linked
5
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news4Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Whm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29205
8.6
8%
May 13
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints
Affected: 120.0.0 before 124.0.38; 126.0.0 before 126.0.59; 130.0.0 before 130.0.23; 132.0.0 before 132.0.32; 134.0.0 before 134.0.26; 136.0.0 before 136.0.10
CVE-2026-32992
8.2
0%
May 13
SSL verification is disabled in the DNS Cluster system
Affected: 126.0.0 before 126.0.59; 130.0.0 before 130.0.23; 132.0.0 before 132.0.32; 134.0.0 before 134.0.26; 136.0.0 before 136.0.10
Showing 2