4119 matches found
CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
EUVD-2026-68922
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
CVE-2026-65643
cPanel & WHM versions prior to 11.138.0.2 (and older branches 11.110, 11.134, 11.136) contain an eval injection in the domain parking and addon domain functionality. An authenticated user with permission to add parked or addon domains can create arbitrary files on the server, escalating to code e...
CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...
CVE-2026-41940-Exploit-PoC
🛡️ CVE-2026-41940-Exploit-PoC - Test your cPanel server security easily This software provides a proof-of-concept tool to check systems for the CVE-2026-41940 vulnerability. This vulnerability affects cPanel and WHM installations. It allows bypass of authentication mechanisms through CRLF...
CVE-2026-41940
CVE-2026-41940 — cPanel2Shell Interaktives Ausnutzungstool für CVE-2026-41940 🧠 Was ist CVE-2026-41940 ? cPanel2Shell nutzt eine kritische Schwachstelle zur Authentifizierungsumgehung in cPanel & WHM aus. Die Schwachstelle wird durch eine CRLF-Injection im Login-/Session-Handling-Mechanismus...
PT-2026-83114
Name of the Vulnerable Software and Affected Versions Plesk for Linux versions 18.0.34 through 18.0.79.8 Description A local privilege escalation issue exists due to OS command injection. This allows a customer or reseller with shell access, or the ability to modify their own shell access, to...
PT-2026-82649
Name of the Vulnerable Software and Affected Versions cPanel & WHM versions prior to 11.110.0.141 cPanel & WHM versions prior to 11.134.0.53 cPanel & WHM versions prior to 11.136.0.37 cPanel & WHM versions prior to 11.138.0.2 WP Squared versions prior to 11.138.1.7 Description An eval injection a...
ROOT-OS-DEBIAN-11-CVE-2022-48623 CVE-2022-48623 in libcpanel-json-xs-perl - Patched by Root
Root has patched CVE-2022-48623 in the libcpanel-json-xs-perl package for Root:Debian:11. Multiple fixed versions available...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 ⚠ This tool is created solely for education...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 ⚠ This tool is created solely for education...
CVE-2026-58047
HTTP Smuggling in cPanel allows potential leak of credentials...
CVE-2026-58048
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...
CVE-2026-58048
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...
CVE-2026-58047
Technical details (affected product/version, root cause, exploitability) are not publicly provided in the supplied documents. Monitor for updates from CVE sources to obtain concrete impact, remediation, and affected configurations.
EUVD-2026-51572
HTTP Smuggling in cPanel allows potential leak of credentials...
CVE-2026-58047
HTTP Smuggling in cPanel allows potential leak of credentials...
CVE-2026-58048
CVE-2026-58048 affects cPanel: during database rename operations the SQL mode is not properly preserved, allowing execution of SQL in the root context. The underlying issue is described as improper preservation of SQL mode when renaming databases, which can enable privilege escalation on privileg...