Vendor
Multiple Vulnerabilities in Cpanel::JSON::XS Perl Module
3 CVEsThe Perl module Cpanel::JSON::XS contains multiple security vulnerabilities in versions prior to 4.80, including information disclosure, denial-of-service, and type confusion.
Multiple Vulnerabilities in cPanel and WHM
2 TTPscPanel and WHM contain multiple vulnerabilities that allow unauthenticated or authenticated attackers to perform cross-site scripting (XSS) and execute arbitrary code with administrative privileges.
CVE-2026-65643 Vulnerability in cPanel Domain Parking
1 CVEA vulnerability in cPanel & WebHost Manager (WHM) Domain Parking functionality identified as CVE-2026-65643 requires urgent patching to prevent potential system compromise.
Arbitrary Code Execution in cPanel/WHM
1 TTP 1 CVEA vulnerability in cPanel/WHM allows a remote, authenticated attacker to execute arbitrary code with administrative privileges on the host system.
Multiple Vulnerabilities in cPanel/WHM
2 TTPsMultiple vulnerabilities in cPanel/WHM allow remote attackers to manipulate files and escalate privileges, potentially leading to arbitrary code execution with administrative rights.
cPanel & WHM and EasyApache4 Vulnerabilities
2 rules 1 TTP 1 CVEcPanel released security advisories addressing CVE-2026-33278 in cPanel & WebHost Manager (WHM) software and EasyApache4, prompting users to apply necessary updates.
cPanel cPanel/WHM Vulnerability Allows Header Manipulation
2 rules 1 TTPA remote, anonymous attacker can exploit a vulnerability in cPanel cPanel/WHM to perform an HTTP response header injection, enabling cross-site scripting (XSS), open redirect attacks, and cache or header manipulation.
cPanel cPanel/WHM Vulnerability Allows Code Execution and DoS
2 rules 2 TTPsA remote, anonymous attacker can exploit a vulnerability in cPanel cPanel/WHM to potentially execute arbitrary code or cause a denial-of-service condition.
Multiple Vulnerabilities in cPanel/WHM Allow Privilege Escalation and Data Manipulation
2 rules 3 TTPsMultiple vulnerabilities in cPanel/WHM allow an attacker to escalate privileges, perform SQL injection with root privileges, manipulate data, or disclose sensitive information.
cPanel & WHM Multiple Vulnerabilities Leading to Privilege Escalation
3 rules 3 TTPs 3 CVEsMultiple vulnerabilities in cPanel & WHM and WP Squared allow authenticated users to escalate privileges, execute arbitrary code, and cause denial-of-service conditions by exploiting improper input validation and unsafe symlink handling.
WHM, cPanel, and WP Squared Vulnerability Allows Remote Code Execution
2 rules 1 TTPA vulnerability exists in WHM, cPanel, and WP Squared, Linux-based web hosting control panels, which could allow for remote code execution by bypassing authentication and gaining administrative access.
Critical Authentication Bypass Vulnerability in cPanel & WHM (CVE-2026-41940)
2 rules 1 TTP 1 CVECVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM, allowing unauthenticated remote attackers to gain administrative access by manipulating session data.
cPanel and WHM Authentication Bypass Vulnerability (CVE-2026-41940)
2 rules 1 TTP 1 CVEAn authentication bypass vulnerability in cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 allows unauthenticated remote attackers to gain unauthorized access to the control panel.