Where
-Infinity
0

Trending

Last week
Last month
Last year

cPanelSQL Injection

Risk 81
Severity
9.4
First published (updated )
CVE-2026-58048

ubuntu/libcpanel-json-xs-perlThe Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allo…

Risk 69
Severity
9.1
First published (updated )
CVE-2022-48623

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-29489

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2021-31803

Cpanel CpanelcPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).

Risk 43
Severity
7.5
First published (updated )
CVE-2021-26266
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelcPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-26267

Cpanel CpanelIn cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).

Risk 38
Severity
6.5
First published (updated )
CVE-2020-29136

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-29137

Cpanel CpanelcPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).

Risk 21
Severity
4.1
First published (updated )
CVE-2020-29135

Cpanel CpanelcPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485).

Risk 86
Severity
9.8
First published (updated )
CVE-2020-26098
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelcPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491).

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26099

Cpanel Cpanelchsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497).

Risk 86
Severity
9.8
First published (updated )
CVE-2020-26100

Cpanel CpanelIn cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).

Risk 86
Severity
9.8
First published (updated )
CVE-2020-26101

Cpanel CpanelIn cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-5…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26102

Cpanel CpanelIn cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551).

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26103
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelIn cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552).

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26104

Cpanel CpanelIn cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554).

Risk 86
Severity
9.8
First published (updated )
CVE-2020-26105

Cpanel CpanelcPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-55…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26106

Cpanel CpanelcPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561).

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26107

Cpanel CpanelcPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).

Risk 86
Severity
9.8
First published (updated )
CVE-2020-26108
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelcPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package mod…

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26109

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-26110

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-26111

Cpanel CpanelThe email quota cache in cPanel before 90.0.10 allows overwriting of files.

Risk 43
Severity
7.5
First published (updated )
CVE-2020-26112

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-26113
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-26114

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-26115

Cpanel CpanelcPanel before 86.0.14 allows attackers to obtain access to the current working directory via the acc…

Risk 60
Severity
8.1
First published (updated )
CVE-2020-12785

Cpanel CpanelcPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings…

Risk 27
Severity
5.3
First published (updated )
CVE-2020-12784

Cpanel CpanelcPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547).

Risk 40
Severity
6.5
First published (updated )
CVE-2020-10122
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203