Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-32992 2 Cpanel, Webpros 5 Cpanel, Whm, Wp Squared and 2 more 2026-08-12 8.2 High
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
CVE-2026-29205 3 Cpanel, Webpros, Wordpress 6 Cpanel, Whm, Wp Squared and 3 more 2026-08-12 8.6 High
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
CVE-2026-41940 1 Cpanel 3 Cpanel, Whm, Wp Squared 2026-05-04 9.8 Critical
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.