51 matches found
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
CVE-2026-93698
A vulnerability in the Multilang adminbin allows for arbitrary command execution due to insufficient validation . This flaw is associated with CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The vulnerability has a CRITICAL severity score of 9.9 , indicating a high imp...
EUVD-2026-91198
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
PT-2026-104097
Name of the Vulnerable Software and Affected Versions cPanel & WHM affected versions not specified Description Insufficient validation in the Multilang adminbin allows for the execution of arbitrary commands, which can grant root-level access to the server. Additionally, stored Cross-Site Scripti...
EUVD-2026-28810
Insufficient input validation of the feature file name in feature::LOADFEATUREFILE adminbin call can cause arbitrary file read when a relative file path is passed...
CVE-2026-29201
Insufficient input validation of the feature file name in feature::LOADFEATUREFILE adminbin call can cause arbitrary file read when a relative file path is passed...
CVE-2026-29201
Insufficient input validation in the feature::LOADFEATUREFILE AdminBin call in cPanel/WHM can lead to arbitrary file read when a relative file path is supplied. Affected product/version scope includes cPanel/WHM prior to versions listed as fixed in PT-2026-38673 (and WP Squared) such as 11.136.0....
CVE-2026-29201
Insufficient input validation of the feature file name in feature::LOADFEATUREFILE adminbin call can cause arbitrary file read when a relative file path is passed...
CVE-2026-29201: Relative Path Traversal
Insufficient input validation of the feature file name in feature::LOADFEATUREFILE adminbin call can cause arbitrary file read when a relative file path is passed...
CVE-2016-10788
cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin SEC-188...
CVE-2017-18434
cPanel before 64.0.21 allows code execution in the context of the root account via a SETVHOSTLANGPACKAGE multilang adminbin call SEC-237...
EUVD-2019-5615
Malware in sbrugna...
EUVD-2018-13407
Malware in sbrugna...
EUVD-2018-13479
Malware in sbrugna...
EUVD-2017-9550
Malware in sbrugna...
EUVD-2016-1766
Malware in sbrugna...