CP
Product
cPanel
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
1
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 7High 10Medium 1Low 0
Watch
Add cPanel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41940 RansomwareIn wildKEV | 9.8 | Apr 29 | WebPros cPanel and WHM Authentication Bypass via Login Flow Affected: 11.40.0.0 before 11.86.0.41; 11.88.0.0 before 11.94.0.28; 11.96.0.0 before 11.102.0.39; 11.104.0.0 before 11.110.0.97; 11.112.0.0 before 11.118.0.63; 11.120.0.0 before 11.124.0.35; +5 more |
| CVE-2026-93698 | 9.9 | Oct 2 | Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin Affected: before 11.138.0.11; before 11.136.0.45; before 11.134.0.61; before 11.110.0.148 |
| CVE-2026-67401 | 9.9 | Sep 9 | A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component Affected: before 11.134.0.55; before 11.136.0.39; before 11.138.0.4; before 11.138.1.9; before 11.110.0.143 |
| CVE-2026-87899 | 9.4 | Sep 23 | Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges Affected: 11.120.0.0 before 11.134.0.57; 11.136.0.0 before 11.136.0.41; 11.138.0.0 before 11.138.0.8 |
| CVE-2026-58048 | 9.4 | Jul 31 | Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context Affected: before 11.110.0.137; before 11.126.0.78; before 11.134.0.48; before 11.136.0.32; before 11.137.9999.99; before 11.118.0.71 |
| CVE-2026-93029 | 9.0 | Oct 2 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface Affected: before 11.138.0.11; before 11.136.0.45; before 11.134.0.61; before 11.110.0.148 |
| CVE-2026-93697 | 9.0 | Oct 2 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface Affected: before 11.138.0.11; before 11.136.0.45; before 11.134.0.61; before 11.110.0.148 |
Showing 7