First published: Fri Sep 25 2020(Updated: )
cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cpanel Cpanel | <88.0.13 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this cPanel vulnerability is CVE-2020-26108.
The severity of CVE-2020-26108 is rated as critical with a severity value of 9.8.
CVE-2020-26108 allows for code execution by mishandling file-extension dispatching in cPanel before version 88.0.13.
CVE-2020-26108 affects cPanel versions before 88.0.13 and can lead to code execution.
To fix CVE-2020-26108, update cPanel to version 88.0.13 or higher.