Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.Check if you run itEPSS 0.76%Oct 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- High8.7Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.Check if you run itEPSS 0.88%Sep 1, 2026
- High7.5Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.Check if you run itEPSS 0.62%Jun 3, 2026
- High7.3Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled.Check if you run itEPSS 0.41%Jun 3, 2026
- High8.5LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityPatch nowKEVEPSS 0.81%Jun 1, 2026
- Critical10.0LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.01%May 20, 2026
- High8.2SSL verification is disabled in the DNS Cluster system.Check if you run itEPSS 0.32%May 13, 2026
- High8.6Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.Check if you run itEPSS 0.41%May 13, 2026
- Medium5.3A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories.Check if you run itEPSS 0.52%May 8, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- High8.8An issue was discovered in cPanel 110 through 132.Check if you run itEPSS 0.83%Dec 11, 2025
- Medium5.3GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.Check if you run itEPSS 0.45%Apr 20, 2025
- Medium5.4GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metachaCheck if you run itEPSS 0.59%Apr 20, 2025
- Medium5.8GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the privatCheck if you run itEPSS 1.38%Apr 20, 2025
- Unknowncpanel cgiecho Use of Externally-Controlled Format StringPatch nowKEVEPSS 2.56%Jun 20, 2017
16 records · page 1 of 1
PreviousNext