Skip to content

#cpanel

2 articles

Security Alerts May 12, 2026

CVE-2026-29204: Insufficient ownership checks in cPanel clientarea.php

Insufficient ownership checks in clientarea.php allow an authenticated client area user to submit requests using another user's addonId without any ownership validation leading to unauthorized acc...

Security Alerts Apr 29, 2026

CVE-2026-41940: Authentication bypass in cPanel & WHM login flow

cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 contain an authentication bypass vulnerability in the login flow allowing unauthenticated remote attackers to access the control panel.