5174 matches found
EUVD-2026-68922
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
CVE-2026-65643
cPanel & WHM versions prior to 11.138.0.2 (and older branches 11.110, 11.134, 11.136) contain an eval injection in the domain parking and addon domain functionality. An authenticated user with permission to add parked or addon domains can create arbitrary files on the server, escalating to code e...
CVE-2026-65643: Improper Neutralization of Directives in Dynamically Evaluated Code
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
CVE-2026-41940-Exploit-PoC
🛡️ CVE-2026-41940-Exploit-PoC - Test your cPanel server security easily This software provides a proof-of-concept tool to check systems for the CVE-2026-41940 vulnerability. This vulnerability affects cPanel and WHM installations. It allows bypass of authentication mechanisms through CRLF...
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager WHM, which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643 , impacts all supported versions of cPanel &...
CVE-2026-41940
CVE-2026-41940 — cPanel2Shell Interaktives Ausnutzungstool für CVE-2026-41940 🧠 Was ist CVE-2026-41940 ? cPanel2Shell nutzt eine kritische Schwachstelle zur Authentifizierungsumgehung in cPanel & WHM aus. Die Schwachstelle wird durch eine CRLF-Injection im Login-/Session-Handling-Mechanismus...
PT-2026-83114
Name of the Vulnerable Software and Affected Versions Plesk for Linux versions 18.0.34 through 18.0.79.8 Description A local privilege escalation issue exists due to OS command injection. This allows a customer or reseller with shell access, or the ability to modify their own shell access, to...
PT-2026-82649
Name of the Vulnerable Software and Affected Versions cPanel & WHM versions prior to 11.110.0.141 cPanel & WHM versions prior to 11.134.0.53 cPanel & WHM versions prior to 11.136.0.37 cPanel & WHM versions prior to 11.138.0.2 WP Squared versions prior to 11.138.1.7 Description An eval injection a...
ROOT-OS-DEBIAN-11-CVE-2022-48623 CVE-2022-48623 in libcpanel-json-xs-perl - Patched by Root
Root has patched CVE-2022-48623 in the libcpanel-json-xs-perl package for Root:Debian:11. Multiple fixed versions available...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 ⚠ This tool is created solely for education...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 ⚠ This tool is created solely for education...
Exploit for CVE-2026-58048
CVE-2026-58048-PoC-Exploit 👾 CVE-2026-58048 – cPanel Root SQL...
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past...
CVE-2026-58047
HTTP Smuggling in cPanel allows potential leak of credentials...
CVE-2026-58048
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...
CVE-2026-58048
CVE-2026-58048 affects cPanel: during database rename operations the SQL mode is not properly preserved, allowing execution of SQL in the root context. The underlying issue is described as improper preservation of SQL mode when renaming databases, which can enable privilege escalation on privileg...