Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: WebPros cPanel, cPanel (CloudLinux 6, CentOS 6) 11.102.0.41, 11.110.0.116 and 10 more versions Clear all filters
TI-2026-23318 CVE-2026-29201 · GHSA-c3fx-j4hr-97w5

Path traversal in WebPros cPanel

Priority LOW 38

Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00435 Published 2026-05-08 Fixed in 11.136.0.9, 11.134.0.25 +11 CWE-23
TI-2026-23319 CVE-2026-29202 · GHSA-4jrh-q927-mvfj

Code injection in WebPros cPanel

Priority LOW 30

Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01855 Published 2026-05-08 Fixed in 11.136.0.9, 11.134.0.25 +11 CWE-94