Vendor
WebPros
- CVEs tracked · all time
- 19
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 7
- articles · all time
- 32
7 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Fri 11 Sep | 1 |
| Wed 16 Sep | 1 |
| Thu 24 Sep | 1 |
| Fri 2 Oct | 1 |
| Tue 20 Oct | 1 |
| Fri 23 Oct | 2 |
Products: Comet Backup, ConfigServer Security & Firewall, cPanel, cPanel & WHM and WP2 (WordPress Squared) and 6 more
Comet BackupConfigServer Security & FirewallcPanelcPanel & WHM and WP2 (WordPress Squared)cPanel (CloudLinux 6, CentOS 6)PleskWHMWHMCSWP SquaredWP Toolkit for cPanel
CVEs
19 CVEsCVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityCVSS9.8CriticalExploited99%EPSS16articles
CVE-2026-65639WebPros ConfigServer Security & Firewall vulnerabilityCVSS9.5Critical–Not in KEV1.4%EPSS1article
CVE-2026-65638WebPros ConfigServer Security & Firewall vulnerabilityCVSS9.2Critical–Not in KEV2.3%EPSS1article
7 more CVEs
- AI Agents Power Ransomware Affiliates’ Attacks on Edge DevicesThe Hacker News
- INC Ransomware Exposed Using AI and Custom Malware Against VictimsSecurityOnline
- AI-Driven Ransomware Campaign Targeted 62 OrganisationsSOCRadar
- cPanel Fixes Flaws That Could Let Hackers Seize Servers as RootSecurityOnline
- cPanel Flaws Let Local Users Seize Shared Hosting ServersSecurityOnline
- WHMCS Fixes Critical Flaw Allowing Unauthenticated Code ExecutionSecurityOnline
- Critical CSF flaws enable server takeover through remote code executionSecurityOnline
- Critical cPanel flaw lets email users escalate to root accessThe Hacker News
- cPanel SQL Flaw Lets Privileged Accounts Seize Servers with Root AccessSecurityOnline
- WHMCS Patches Critical Flaws Enabling Code Execution and Data TheftSecurityOnline
- Critical cPanel flaw (CVE-2026-58048) lets users run SQL as rootSecurity Affairs
- cPanel fixes high risk SQL bug CVE-2026-58048 in shared hostingSecurityOnline
- Plesk CVE-2026-44962 Flaw Lets Low Priv Users Gain Server AccessSecurityOnline
- Critical CVE-2026-32999 flaw in Comet Backup permits remote codeSecurityOnline
- Security Affairs Round 97 Covers JDownloader Hacked, TrickMo RiseSecurity Affairs
- Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager BackdoorSecurity Affairs
- Mr_Rot13 Exploits Critical cPanel Flaw, Deploys FilemanagerThe Hacker News
- New cPanel vulnerabilities could allow file access and remote code executionSecurity Affairs
- cPanel fixes bugs enabling code execution or privilege escalationThe Hacker News
- DomainTools Investigations | Cybersecurity Reading List - Week of 2026-05-04dti.domaintools.com
- cPanel auth bypass exploited in Asian gov, MSP attacksSecurity Affairs
- Attackers Exploit cPanel Flaw, Endangering Millions of WebsitesDark Reading
- Hacker News Weekly: Exploits Outpace Patches, Systems at Risk.The Hacker News
- Critical cPanel Vulnerability Weaponized to Target Government and MSP NetworksThe Hacker News
- Attackers hit over 40k cPanel servers via CVE-2026-41940 flawSecurityWeek
- CISA adds critical cPanel auth bypass flaw to KEV catalogueSecurity Affairs
- Critical cPanel WHM bypass lets attackers hijack admin accessMalwarebytes
- “to recover your files, kindly send 0.1 BTC to…” ransom note appears on websitesDataBreaches
- CISA flags critical cPanel WHM auth flaw allowing remote takeoverCISA · official notice
- CISA Flags Critical cPanel & WHM Bug CVE‑2026‑41940 Under AttackCISA · official notice
- Critical cPanel Auth Bypass (CVE-2026-41940) Exposes 1.5M ServersSecurityWeek
- Critical cPanel Flaw Lets Hackers Hijack Admin Access RemotelyRapid7 · first in our coverage