Vulnerabilities

TI-2026-65922 CVE-2026-93029 · GHSA-cc4m-c4vh-cj6w

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.

MEDIUM 42

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface.

CVSS 3.0CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0055 Published 2026-10-02 Fixed in 11.138.0.11, 11.136.0.45 +3 CWE-79

TI-2026-65925 CVE-2026-93697 · GHSA-jc78-m6vr-f88f

MEDIUM 42

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.

CVSS 3.0CRITICAL 9.0 Network Low privileges User interaction EPSS 0.0055 Published 2026-10-02 Fixed in 11.138.0.11, 11.136.0.45 +3 CWE-79

TI-2026-65926 CVE-2026-93698 · GHSA-hw2c-444c-65c4

MEDIUM 44

Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00633 Published 2026-10-02 Fixed in 11.138.0.11, 11.136.0.45 +3 CWE-78