Vendor

WebPros

Comet Backup Plesk WHMCS WP Squared cPanel cPanel & WHM and WP2 (WordPress Squared) cPanel (CloudLinux 6, CentOS 6)

Tracked CVEs

CVE-2026-67398 CVE-2026-58048 CVE-2026-58047 CVE-2026-44962 CVE-2026-32999 CVE-2026-41940KEV CVE-2026-29201 CVE-2026-29202 CVE-2026-29203

Coverage timeline

WHMCS Patches Critical Flaws Enabling Code Execution and Data Theft
securityonline.info · Sep 4, 2026
Critical cPanel flaw (CVE-2026-58048) lets users run SQL as root
securityaffairs.com · Aug 4, 2026
cPanel fixes high risk SQL bug CVE-2026-58048 in shared hosting
securityonline.info · Aug 4, 2026
Plesk CVE-2026-44962 Flaw Lets Low Priv Users Gain Server Access
securityonline.info · Jun 1, 2026
Critical CVE-2026-32999 flaw in Comet Backup permits remote code
securityonline.info · May 31, 2026
Security Affairs Round 97 Covers JDownloader Hacked, TrickMo Rise
securityaffairs.com · May 17, 2026
Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager Backdoor
securityaffairs.com · May 12, 2026
Mr_Rot13 Exploits Critical cPanel Flaw, Deploys Filemanager
thehackernews.com · May 11, 2026
New cPanel vulnerabilities could allow file access and remote code execution
securityaffairs.com · May 10, 2026
cPanel fixes bugs enabling code execution or privilege escalation
thehackernews.com · May 9, 2026
DomainTools Investigations | Cybersecurity Reading List - Week of 2026-05-04
dti.domaintools.com · May 7, 2026
cPanel auth bypass exploited in Asian gov, MSP attacks
securityaffairs.com · May 4, 2026
Attackers Exploit cPanel Flaw, Endangering Millions of Websites
www.darkreading.com · May 4, 2026
Hacker News Weekly: Exploits Outpace Patches, Systems at Risk.
thehackernews.com · May 4, 2026
Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks
thehackernews.com · May 4, 2026
Attackers hit over 40k cPanel servers via CVE-2026-41940 flaw
www.securityweek.com · May 4, 2026
CISA adds critical cPanel auth bypass flaw to KEV catalogue
securityaffairs.com · May 3, 2026
Critical cPanel WHM bypass lets attackers hijack admin access
www.malwarebytes.com · May 1, 2026
“to recover your files, kindly send 0.1 BTC to…” ransom note appears on websites
databreaches.net · Apr 30, 2026
CISA flags critical cPanel WHM auth flaw allowing remote takeover
www.cisa.gov · Apr 30, 2026
CISA Flags Critical cPanel & WHM Bug CVE‑2026‑41940 Under Attack
cisa.gov · Apr 30, 2026
Critical cPanel Auth Bypass (CVE-2026-41940) Exposes 1.5M Servers
www.securityweek.com · Apr 30, 2026
Critical cPanel Flaw Lets Hackers Hijack Admin Access Remotely
www.rapid7.com · Apr 29, 2026