CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

CVE-2026-29205

The CVE-2026-29205 issue affects cPanel & WHM. The vulnerability arises from incorrect privileges management and insufficient path filtering, enabling an attacker to read arbitrary files on the server via the cpdavd attachment download endpoints. PT Security reports indicate multiple vulnerabilit...

CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

CVE-2026-29205

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints...

EUVD-2017-9516

Malware in sbrugna...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

cPanel Authorization Issues Vulnerability (CNVD-2019-36124)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in cPanel. An attacker can exploit this vulnerability to create the cpdavderrorlog fi...

cPanel Command Injection Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 68.0.15. An attacker can exploit the vulnerability to execute code wi...

CVE-2017-18425

In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions SEC-280...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

Remote code execution

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

CVE-2017-18400 affects cPanel before 68.0.15, enabling local root code execution via the cpdavd component. The vulnerability is triggered by an attacker with local access, leading to complete control over the host’s root privileges as described in multiple sources (e.g., Red Hat advisory and CNVD...