The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x…
Priority LOW 25CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
Why it matters now
EPSS 0.00511 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 114
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* | up to 56.0.50 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.3:*:*:*:*:*:*:* | 58.0.3 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.4:*:*:*:*:*:*:* | 58.0.4 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.5:*:*:*:*:*:*:* | 58.0.5 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.6:*:*:*:*:*:*:* | 58.0.6 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.7:*:*:*:*:*:*:* | 58.0.7 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.8:*:*:*:*:*:*:* | 58.0.8 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.11:*:*:*:*:*:*:* | 58.0.11 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.12:*:*:*:*:*:*:* | 58.0.12 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.13:*:*:*:*:*:*:* | 58.0.13 | Vulnerable | Cpanel |
- cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* Versions up to 56.0.50 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.3:*:*:*:*:*:*:* Versions 58.0.3 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.4:*:*:*:*:*:*:* Versions 58.0.4 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.5:*:*:*:*:*:*:* Versions 58.0.5 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.6:*:*:*:*:*:*:* Versions 58.0.6 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.7:*:*:*:*:*:*:* Versions 58.0.7 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.8:*:*:*:*:*:*:* Versions 58.0.8 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.11:*:*:*:*:*:*:* Versions 58.0.11 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.12:*:*:*:*:*:*:* Versions 58.0.12 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.13:*:*:*:*:*:*:* Versions 58.0.13 Vulnerable ·Cpanel
Show 104 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cpanel:whm:58.0.17:*:*:*:*:*:*:* | 58.0.17 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.19:*:*:*:*:*:*:* | 58.0.19 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.20:*:*:*:*:*:*:* | 58.0.20 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.23:*:*:*:*:*:*:* | 58.0.23 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.24:*:*:*:*:*:*:* | 58.0.24 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.25:*:*:*:*:*:*:* | 58.0.25 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.26:*:*:*:*:*:*:* | 58.0.26 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.27:*:*:*:*:*:*:* | 58.0.27 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.28:*:*:*:*:*:*:* | 58.0.28 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.29:*:*:*:*:*:*:* | 58.0.29 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.30:*:*:*:*:*:*:* | 58.0.30 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.31:*:*:*:*:*:*:* | 58.0.31 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.32:*:*:*:*:*:*:* | 58.0.32 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.34:*:*:*:*:*:*:* | 58.0.34 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.36:*:*:*:*:*:*:* | 58.0.36 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.37:*:*:*:*:*:*:* | 58.0.37 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.41:*:*:*:*:*:*:* | 58.0.41 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.43:*:*:*:*:*:*:* | 58.0.43 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.44:*:*:*:*:*:*:* | 58.0.44 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.45:*:*:*:*:*:*:* | 58.0.45 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.46:*:*:*:*:*:*:* | 58.0.46 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.47:*:*:*:*:*:*:* | 58.0.47 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.48:*:*:*:*:*:*:* | 58.0.48 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.49:*:*:*:*:*:*:* | 58.0.49 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.50:*:*:*:*:*:*:* | 58.0.50 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:58.0.51:*:*:*:*:*:*:* | 58.0.51 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.3:*:*:*:*:*:*:* | 60.0.3 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.4:*:*:*:*:*:*:* | 60.0.4 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.5:*:*:*:*:*:*:* | 60.0.5 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.6:*:*:*:*:*:*:* | 60.0.6 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.8:*:*:*:*:*:*:* | 60.0.8 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.9:*:*:*:*:*:*:* | 60.0.9 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.10:*:*:*:*:*:*:* | 60.0.10 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.11:*:*:*:*:*:*:* | 60.0.11 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.12:*:*:*:*:*:*:* | 60.0.12 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.13:*:*:*:*:*:*:* | 60.0.13 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.14:*:*:*:*:*:*:* | 60.0.14 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.15:*:*:*:*:*:*:* | 60.0.15 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.17:*:*:*:*:*:*:* | 60.0.17 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.18:*:*:*:*:*:*:* | 60.0.18 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.19:*:*:*:*:*:*:* | 60.0.19 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.22:*:*:*:*:*:*:* | 60.0.22 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.24:*:*:*:*:*:*:* | 60.0.24 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.25:*:*:*:*:*:*:* | 60.0.25 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.26:*:*:*:*:*:*:* | 60.0.26 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.27:*:*:*:*:*:*:* | 60.0.27 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.28:*:*:*:*:*:*:* | 60.0.28 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.31:*:*:*:*:*:*:* | 60.0.31 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.32:*:*:*:*:*:*:* | 60.0.32 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.34:*:*:*:*:*:*:* | 60.0.34 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.35:*:*:*:*:*:*:* | 60.0.35 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.36:*:*:*:*:*:*:* | 60.0.36 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.37:*:*:*:*:*:*:* | 60.0.37 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.38:*:*:*:*:*:*:* | 60.0.38 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.39:*:*:*:*:*:*:* | 60.0.39 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.42:*:*:*:*:*:*:* | 60.0.42 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.43:*:*:*:*:*:*:* | 60.0.43 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:60.0.44:*:*:*:*:*:*:* | 60.0.44 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.1:*:*:*:*:*:*:* | 62.0.1 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.2:*:*:*:*:*:*:* | 62.0.2 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.4:*:*:*:*:*:*:* | 62.0.4 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.5:*:*:*:*:*:*:* | 62.0.5 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.6:*:*:*:*:*:*:* | 62.0.6 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.7:*:*:*:*:*:*:* | 62.0.7 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.8:*:*:*:*:*:*:* | 62.0.8 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.9:*:*:*:*:*:*:* | 62.0.9 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.10:*:*:*:*:*:*:* | 62.0.10 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.11:*:*:*:*:*:*:* | 62.0.11 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.12:*:*:*:*:*:*:* | 62.0.12 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.14:*:*:*:*:*:*:* | 62.0.14 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.15:*:*:*:*:*:*:* | 62.0.15 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.16:*:*:*:*:*:*:* | 62.0.16 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.17:*:*:*:*:*:*:* | 62.0.17 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.19:*:*:*:*:*:*:* | 62.0.19 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.20:*:*:*:*:*:*:* | 62.0.20 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.23:*:*:*:*:*:*:* | 62.0.23 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.24:*:*:*:*:*:*:* | 62.0.24 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:62.0.26:*:*:*:*:*:*:* | 62.0.26 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.0:*:*:*:*:*:*:* | 64.0.0 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.1:*:*:*:*:*:*:* | 64.0.1 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.2:*:*:*:*:*:*:* | 64.0.2 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.3:*:*:*:*:*:*:* | 64.0.3 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.4:*:*:*:*:*:*:* | 64.0.4 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.7:*:*:*:*:*:*:* | 64.0.7 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.9:*:*:*:*:*:*:* | 64.0.9 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.11:*:*:*:*:*:*:* | 64.0.11 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.12:*:*:*:*:*:*:* | 64.0.12 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.13:*:*:*:*:*:*:* | 64.0.13 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.14:*:*:*:*:*:*:* | 64.0.14 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.15:*:*:*:*:*:*:* | 64.0.15 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.17:*:*:*:*:*:*:* | 64.0.17 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.18:*:*:*:*:*:*:* | 64.0.18 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.19:*:*:*:*:*:*:* | 64.0.19 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.20:*:*:*:*:*:*:* | 64.0.20 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.21:*:*:*:*:*:*:* | 64.0.21 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.22:*:*:*:*:*:*:* | 64.0.22 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.24:*:*:*:*:*:*:* | 64.0.24 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.27:*:*:*:*:*:*:* | 64.0.27 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.28:*:*:*:*:*:*:* | 64.0.28 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.29:*:*:*:*:*:*:* | 64.0.29 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.30:*:*:*:*:*:*:* | 64.0.30 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.31:*:*:*:*:*:*:* | 64.0.31 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:64.0.32:*:*:*:*:*:*:* | 64.0.32 | Vulnerable | Cpanel |
| cpe:2.3:a:cpanel:whm:66.0.1:*:*:*:*:*:*:* | 66.0.1 | Vulnerable | Cpanel |
- cpe:2.3:a:cpanel:whm:58.0.17:*:*:*:*:*:*:* Versions 58.0.17 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.19:*:*:*:*:*:*:* Versions 58.0.19 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.20:*:*:*:*:*:*:* Versions 58.0.20 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.23:*:*:*:*:*:*:* Versions 58.0.23 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.24:*:*:*:*:*:*:* Versions 58.0.24 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.25:*:*:*:*:*:*:* Versions 58.0.25 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.26:*:*:*:*:*:*:* Versions 58.0.26 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.27:*:*:*:*:*:*:* Versions 58.0.27 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.28:*:*:*:*:*:*:* Versions 58.0.28 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.29:*:*:*:*:*:*:* Versions 58.0.29 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.30:*:*:*:*:*:*:* Versions 58.0.30 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.31:*:*:*:*:*:*:* Versions 58.0.31 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.32:*:*:*:*:*:*:* Versions 58.0.32 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.34:*:*:*:*:*:*:* Versions 58.0.34 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.36:*:*:*:*:*:*:* Versions 58.0.36 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.37:*:*:*:*:*:*:* Versions 58.0.37 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.41:*:*:*:*:*:*:* Versions 58.0.41 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.43:*:*:*:*:*:*:* Versions 58.0.43 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.44:*:*:*:*:*:*:* Versions 58.0.44 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.45:*:*:*:*:*:*:* Versions 58.0.45 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.46:*:*:*:*:*:*:* Versions 58.0.46 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.47:*:*:*:*:*:*:* Versions 58.0.47 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.48:*:*:*:*:*:*:* Versions 58.0.48 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.49:*:*:*:*:*:*:* Versions 58.0.49 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.50:*:*:*:*:*:*:* Versions 58.0.50 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:58.0.51:*:*:*:*:*:*:* Versions 58.0.51 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.3:*:*:*:*:*:*:* Versions 60.0.3 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.4:*:*:*:*:*:*:* Versions 60.0.4 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.5:*:*:*:*:*:*:* Versions 60.0.5 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.6:*:*:*:*:*:*:* Versions 60.0.6 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.8:*:*:*:*:*:*:* Versions 60.0.8 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.9:*:*:*:*:*:*:* Versions 60.0.9 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.10:*:*:*:*:*:*:* Versions 60.0.10 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.11:*:*:*:*:*:*:* Versions 60.0.11 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.12:*:*:*:*:*:*:* Versions 60.0.12 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.13:*:*:*:*:*:*:* Versions 60.0.13 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.14:*:*:*:*:*:*:* Versions 60.0.14 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.15:*:*:*:*:*:*:* Versions 60.0.15 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.17:*:*:*:*:*:*:* Versions 60.0.17 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.18:*:*:*:*:*:*:* Versions 60.0.18 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.19:*:*:*:*:*:*:* Versions 60.0.19 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.22:*:*:*:*:*:*:* Versions 60.0.22 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.24:*:*:*:*:*:*:* Versions 60.0.24 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.25:*:*:*:*:*:*:* Versions 60.0.25 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.26:*:*:*:*:*:*:* Versions 60.0.26 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.27:*:*:*:*:*:*:* Versions 60.0.27 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.28:*:*:*:*:*:*:* Versions 60.0.28 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.31:*:*:*:*:*:*:* Versions 60.0.31 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.32:*:*:*:*:*:*:* Versions 60.0.32 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.34:*:*:*:*:*:*:* Versions 60.0.34 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.35:*:*:*:*:*:*:* Versions 60.0.35 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.36:*:*:*:*:*:*:* Versions 60.0.36 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.37:*:*:*:*:*:*:* Versions 60.0.37 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.38:*:*:*:*:*:*:* Versions 60.0.38 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.39:*:*:*:*:*:*:* Versions 60.0.39 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.42:*:*:*:*:*:*:* Versions 60.0.42 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.43:*:*:*:*:*:*:* Versions 60.0.43 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:60.0.44:*:*:*:*:*:*:* Versions 60.0.44 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.1:*:*:*:*:*:*:* Versions 62.0.1 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.2:*:*:*:*:*:*:* Versions 62.0.2 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.4:*:*:*:*:*:*:* Versions 62.0.4 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.5:*:*:*:*:*:*:* Versions 62.0.5 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.6:*:*:*:*:*:*:* Versions 62.0.6 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.7:*:*:*:*:*:*:* Versions 62.0.7 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.8:*:*:*:*:*:*:* Versions 62.0.8 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.9:*:*:*:*:*:*:* Versions 62.0.9 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.10:*:*:*:*:*:*:* Versions 62.0.10 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.11:*:*:*:*:*:*:* Versions 62.0.11 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.12:*:*:*:*:*:*:* Versions 62.0.12 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.14:*:*:*:*:*:*:* Versions 62.0.14 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.15:*:*:*:*:*:*:* Versions 62.0.15 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.16:*:*:*:*:*:*:* Versions 62.0.16 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.17:*:*:*:*:*:*:* Versions 62.0.17 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.19:*:*:*:*:*:*:* Versions 62.0.19 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.20:*:*:*:*:*:*:* Versions 62.0.20 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.23:*:*:*:*:*:*:* Versions 62.0.23 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.24:*:*:*:*:*:*:* Versions 62.0.24 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:62.0.26:*:*:*:*:*:*:* Versions 62.0.26 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.0:*:*:*:*:*:*:* Versions 64.0.0 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.1:*:*:*:*:*:*:* Versions 64.0.1 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.2:*:*:*:*:*:*:* Versions 64.0.2 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.3:*:*:*:*:*:*:* Versions 64.0.3 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.4:*:*:*:*:*:*:* Versions 64.0.4 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.7:*:*:*:*:*:*:* Versions 64.0.7 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.9:*:*:*:*:*:*:* Versions 64.0.9 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.11:*:*:*:*:*:*:* Versions 64.0.11 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.12:*:*:*:*:*:*:* Versions 64.0.12 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.13:*:*:*:*:*:*:* Versions 64.0.13 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.14:*:*:*:*:*:*:* Versions 64.0.14 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.15:*:*:*:*:*:*:* Versions 64.0.15 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.17:*:*:*:*:*:*:* Versions 64.0.17 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.18:*:*:*:*:*:*:* Versions 64.0.18 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.19:*:*:*:*:*:*:* Versions 64.0.19 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.20:*:*:*:*:*:*:* Versions 64.0.20 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.21:*:*:*:*:*:*:* Versions 64.0.21 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.22:*:*:*:*:*:*:* Versions 64.0.22 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.24:*:*:*:*:*:*:* Versions 64.0.24 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.27:*:*:*:*:*:*:* Versions 64.0.27 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.28:*:*:*:*:*:*:* Versions 64.0.28 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.29:*:*:*:*:*:*:* Versions 64.0.29 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.30:*:*:*:*:*:*:* Versions 64.0.30 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.31:*:*:*:*:*:*:* Versions 64.0.31 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:64.0.32:*:*:*:*:*:*:* Versions 64.0.32 Vulnerable ·Cpanel
- cpe:2.3:a:cpanel:whm:66.0.1:*:*:*:*:*:*:* Versions 66.0.1 Vulnerable ·Cpanel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-11441
- 2026-10-03 Alias added: GHSA-cr6w-p37f-qc23
References
More Cpanel Whm vulnerabilities
- TI-2026-30342 WebPros cPanel and WHM Authentication Bypass via Login Flow KEVCVSS 4.0CRITICAL 9.3
- TI-2026-23322 Incorrect privileges management and insufficient path filtering allow to read arbitrary… CVSS 3.1HIGH 8.6
- TI-2026-25440 Improper certificate validation in WebPros cPanel CVSS 3.1HIGH 8.2
- TI-2012-05192 The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. CVSS 3.1MEDIUM 5.4
Sources
- CVE-2017-11441 · CVE Program
- CVE-2017-11441 · NVD
- FIRST EPSS
- GHSA-cr6w-p37f-qc23 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences