8.8 HighCWE-94
CVE-2026-29202
WebPros cPanel vulnerability
WebProscPanel
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.7%probability of exploitation in the next 30 days
Higher than 52% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Sat 9 May · 08:16 UTC | The Hacker News | cPanel fixes bugs enabling code execution or privilege escalation |
| Sun 10 May · 16:21 UTC | Security Affairs | New cPanel vulnerabilities could allow file access and remote code execution |
- New cPanel vulnerabilities could allow file access and remote code executionSecurity Affairs · mentions it in passing
- cPanel fixes bugs enabling code execution or privilege escalationThe Hacker News · first in our coverage · mentions it in passing