Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.Oct 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityKEVEPSS 0.2%Sep 16, 2026
- High8.7Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.EPSS 0.9%Sep 1, 2026
- High8.5LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityKEVEPSS 0.8%Jun 13, 2026
- Critical10.0LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityKEVEPSS 1.0%May 20, 2026
- Medium5.3A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks, allowing setting root permissions on arbitrary system files or directories.May 8, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.5%Apr 29, 2026
- High8.8An issue was discovered in cPanel 110 through 132.EPSS 0.8%Dec 11, 2025
8 records · page 1 of 1
PreviousNext