cPanel (CloudLinux 6, CentOS 6) vulnerabilities

2 known vulnerabilities in cPanel (CloudLinux 6, CentOS 6) from WebPros. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  cPanel: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-29206May 13, 2026WebPros

  Insufficient sanitization of SQL queries in the `sqloptimizer` utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled.

• 8.6 High severity

  cPanel: Relative Path Traversal

  CVE-2026-29201May 8, 2026WebPros

  Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.