Skip to content
Noroxi

cpanel records

431 published records for vendor cpanel.

Researcher profile

Entered KEV
1 · 0.2%
Weaponized
1 · 0.2%
Pre-auth RCE
13
With a fix record
1.6%
Median publish → KEV
1 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 23
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

431 records
  • CVE-2026-41940
    97Now

    WebPros cPanel and WHM Authentication Bypass via Login Flow

    CriticalCVSS 9.3KEVWeaponizedEPSS 99%

    cpanel · cpanelApr 29, 2026

  • CVE-2004-1769
    50Plan

    The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attack

    CriticalCVSS 10.0Proof of conceptEPSS 35%

    cpanel · cpanelMar 11, 2004

  • CVE-2023-29489
    44Plan

    An issue was discovered in cPanel before 11.109.9999.116.

    MediumCVSS 6.1Proof of conceptEPSS 66%

    cpanel · cpanelApr 27, 2023

  • CVE-2003-1425
    43Plan

    guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    cpanel · cpanelDec 31, 2003

  • CVE-2004-1770
    43Plan

    The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cpanel · cpanelMar 11, 2004

  • CVE-2020-26098
    40Plan

    cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485).

    CriticalCVSS 9.8No exploitEPSS 3%

    cpanel · cpanelSep 25, 2020

  • CVE-2016-10855
    40Plan

    cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).

    CriticalCVSS 9.8No exploitEPSS 3%

    cpanel · cpanelAug 1, 2019

  • CVE-2016-10858
    40Plan

    cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).

    CriticalCVSS 9.8No exploitEPSS 3%

    cpanel · cpanelAug 1, 2019

  • CVE-2016-10824
    40Plan

    cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).

    CriticalCVSS 9.8No exploitEPSS 3%

    cpanel · cpanelAug 1, 2019

  • CVE-2020-26108
    40Plan

    cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelSep 25, 2020

  • CVE-2018-20863
    40Plan

    cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelJul 30, 2019

  • CVE-2020-10119
    40Plan

    cPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync shell (SEC-544).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelMar 17, 2020

  • CVE-2020-10121
    40Plan

    cPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC-546).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelMar 17, 2020

  • CVE-2016-10817
    39Monitor

    cPanel before 57.9999.54 allows SQL Injection via the ModSecurity TailWatch log file (SEC-123).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelAug 1, 2019

  • CVE-2020-26100
    39Monitor

    chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelSep 25, 2020

  • CVE-2019-20498
    39Monitor

    cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).

    CriticalCVSS 9.8No exploitEPSS 2%

    cpanel · cpanelMar 17, 2020

  • CVE-2020-26101
    39Monitor

    In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).

    CriticalCVSS 9.8No exploitEPSS 1%

    cpanel · cpanelSep 25, 2020

  • CVE-2020-26105
    39Monitor

    In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554).

    CriticalCVSS 9.8No exploitEPSS 1%

    cpanel · cpanelSep 25, 2020

  • CVE-2018-20887
    39Monitor

    cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).

    CriticalCVSS 9.8No exploitEPSS 1%

    cpanel · cpanelAug 1, 2019

  • CVE-2004-1875
    38Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via th

    CriticalCVSS 9.3Proof of conceptEPSS 5%

    cpanel · cpanelMar 30, 2004

  • CVE-2006-5014
    36Monitor

    Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspecified vectors in (1

    HighCVSS 8.8Proof of conceptEPSS 4%

    cpanel · cpanelSep 26, 2006

  • CVE-2016-10828
    36Monitor

    cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97).

    HighCVSS 8.8No exploitEPSS 3%

    cpanel · cpanelAug 1, 2019

  • CVE-2016-10823
    36Monitor

    cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).

    HighCVSS 8.8No exploitEPSS 2%

    cpanel · cpanelAug 1, 2019

  • CVE-2016-10850
    36Monitor

    cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).

    HighCVSS 8.8No exploitEPSS 2%

    cpanel · cpanelAug 1, 2019

  • CVE-2016-10840
    36Monitor

    cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication (SEC-72).

    HighCVSS 8.8No exploitEPSS 2%

    cpanel · cpanelAug 1, 2019