Approved changes feed: RSS · Atom
cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cpanel (dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28) |
|---|---|
| Product | Whm (7aebf372-897d-507e-b784-f6be93f6daf7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41940 |
vulnerable | 2026-06-08 08:03:15.795484 |
WebPros cPanel and WHM Authentication Bypass via Login Flow
CRITICAL (9.8)
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
Published: 2026-04-29T15:10:37.899Z
Updated: 2026-08-11T03:55:30.673Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11441 |
vulnerable | 2026-06-08 05:08:37.711821 |
Details available
The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
Published: 2017-07-19T07:00:00.000Z
Updated: 2024-08-05T18:12:39.951Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.