Skip to content
Threat Feed
Subscribe

Product

WHM

3 briefs RSS
high advisory

Multiple Vulnerabilities in cPanel and WHM

cPanel and WHM contain multiple vulnerabilities that allow unauthenticated or authenticated attackers to perform cross-site scripting (XSS) and execute arbitrary code with administrative privileges.

cPanel +1
2t
critical advisory

WHM, cPanel, and WP Squared Vulnerability Allows Remote Code Execution

A vulnerability exists in WHM, cPanel, and WP Squared, Linux-based web hosting control panels, which could allow for remote code execution by bypassing authentication and gaining administrative access.

cPanel +2 vulnerability rce whm wp squared linux
2r 1t
critical advisory

cPanel and WHM Authentication Bypass Vulnerability (CVE-2026-41940)

An authentication bypass vulnerability in cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 allows unauthenticated remote attackers to gain unauthorized access to the control panel.

WHM +1 cpanel authentication-bypass CVE-2026-41940 webserver
2r 1t 1c