Yüksek CVSS 8.6
CVE-2026-29205: Cpanel: güvenlik açığı
Açıklama (NVD)
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
Özet bilgiler
- Ürün
- Cpanel Cpanel
- CVSS v3.1
- 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - EPSS
- %8,37 (yüzdelik 95)
- CWE
- CWE-250
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| cpanel-cpanel | 120.0.0 | — | 124.0.38 |
| cpanel-cpanel | 126.0.0 | — | 126.0.59 |
| cpanel-cpanel | 130.0.0 | — | 130.0.23 |
| cpanel-cpanel | 130.0.23 | — | 130.0.23 |
| cpanel-cpanel | 132.0.0 | — | 132.0.32 |
| cpanel-cpanel | 134.0.0 | — | 134.0.26 |
| cpanel-cpanel | 136.0.0 | — | 136.0.10 |
| cpanel-wp-squared | 120.1.0 | — | 136.1.12 |
| cpanel-whm | 120.0.0 | — | 124.0.38 |
| cpanel-whm | 126.0.0 | — | 126.0.59 |
| cpanel-whm | 130.0.0 | — | 130.0.23 |
| cpanel-whm | 132.0.0 | — | 132.0.32 |
| cpanel-whm | 134.0.0 | — | 134.0.26 |
| cpanel-whm | 136.0.0 | — | 136.0.10 |