Whm vulnerabilities

2 known vulnerabilities in Whm from cPanel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  cPanel: Improper Certificate Validation

  CVE-2026-32992May 13, 2026WebPros

  SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.

• 8.6 High severity

  cPanel: Execution with Unnecessary Privileges

  CVE-2026-29205May 13, 2026WebProsEPSS 8.37%

  Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.