4.3 MediumCWE-23
CVE-2026-29201
WebPros cPanel vulnerability
WebProscPanel
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
0.3%probability of exploitation in the next 30 days
Higher than 26% of scored CVEs
SeverityCVSS
4.3Medium
Description NVD
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Sat 9 May · 08:16 UTC | The Hacker News | cPanel fixes bugs enabling code execution or privilege escalation |
| Sun 10 May · 16:21 UTC | Security Affairs | New cPanel vulnerabilities could allow file access and remote code execution |
- New cPanel vulnerabilities could allow file access and remote code executionSecurity Affairs
- cPanel fixes bugs enabling code execution or privilege escalationThe Hacker News · first in our coverage