Product by WebPros
WebPros cPanel
18 known vulnerabilities in WebPros cPanel (WebPros), 1 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-41940 | WebPros cPanel and WHM Authentication Bypass via Login Flow In CISA KEVRansomwarealso in 4 other products | 9.8 | |
| High | CVE-2026-29205 | WebPros cPanel: Execution with Unnecessary Privileges | 8.6 | |
| High | CVE-2026-29202 | WebPros cPanel: Code Injection | 8.8 | |
| Critical | CVE-2026-67401 | WebPros cPanel: SQL Injection | 9.9 | |
| Critical | CVE-2026-93698 | Webpros cPanel: OS Command Injection | 9.9 | |
| High | CVE-2026-65643 | WebPros cPanel: Eval Injection | 8.8 | |
| Critical | CVE-2026-87899 | WebPros cPanel: Execution with Unnecessary Privileges | — | |
| Critical | CVE-2026-93029 | Webpros cPanel: Cross-site Scripting | 9.0 | |
| Critical | CVE-2026-93697 | Webpros cPanel: Cross-site Scripting | 9.0 | |
| Critical | CVE-2026-58048 | WebPros cPanel: SQL Injection | — | |
| High | CVE-2026-29203 | WebPros cPanel: UNIX Symbolic Link (Symlink) Following | 8.8 | |
| High | CVE-2026-29201 | WebPros cPanel: Relative Path Traversal | 8.6 | |
| High | CVE-2026-68490 | WebPros cPanel: Incorrect Permission Assignment for Critical Resource | — | |
| Medium | CVE-2026-58047 | WebPros cPanel: HTTP Request/Response Smuggling | — | |
| High | CVE-2026-32993 | WebPros cPanel: CRLF Injection | 8.3 | |
| High | CVE-2026-29206 | WebPros cPanel: SQL Injection | 8.1 | |
| High | CVE-2026-32992 | WebPros cPanel: Improper Certificate Validation | 8.2 | |
| High | CVE-2026-32991 | WebPros cPanel: Incorrect Authorization | 7.1 |
News
- Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Serverthehackernews,
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootthehackernews,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- Patch Now: cPanel and WHM Critical Authentication Bypasssans-newsbites-mail,