WebPros cPanel vulnerabilities
20 published CVEs name WebPros cPanel among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 20
- Last 12 months
- 20
- Critical
- 7
- Known exploited
- 1
Critical 7High 10Medium 3Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2026-41940
WebPros cPanel and WHM Authentication Bypass via Login Flow
WebPros · cPanel
ExploitedCritical9.3
Newest CVEs
- CVE-2026-105476
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.
WebPros · cPanel
High8.8 - CVE-2026-105475
Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.
WebPros · cPanel
High8.7 - CVE-2026-93029
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.
Webpros · cPanel
Critical9.0 - CVE-2026-93697
There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.
Webpros · cPanel
Critical9.0 - CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.
Webpros · cPanel
Critical9.9 - CVE-2026-87899
Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.
WebPros · cPanel
Critical9.4 - CVE-2026-68490
Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.
WebPros · cPanel
High8.2 - CVE-2026-67401
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component
WebPros · cPanel
Critical9.9 - CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
WebPros · cPanel
High8.7 - CVE-2026-58048
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.
WebPros · cPanel
Critical9.4