CVE-2020-26107
First published: Fri Sep 25 2020(Updated: )
cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cpanel Cpanel | <88.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-26107?
CVE-2020-26107 is a vulnerability in cPanel before version 88.0.3 that allows for the establishment of predictable PowerDNS API keys during an upgrade.
How severe is CVE-2020-26107?
CVE-2020-26107 has a severity rating of high, with a CVSS score of 7.5.
What is the affected software version for CVE-2020-26107?
The affected software version for CVE-2020-26107 is cPanel up to version 88.0.3.
How can I fix CVE-2020-26107?
To fix CVE-2020-26107, you should upgrade your cPanel to version 88.0.3 or newer.
Where can I find more information about CVE-2020-26107?
You can find more information about CVE-2020-26107 in the cPanel change log for version 88.0.3.
- collector/nvd-index
- vendor/cpanel
- canonical/cpanel cpanel