Security Advisory: New High Severity Vulnerabilities in WHM/cPanel

First posted on Thursday, 30 July 2026 This advisory is provided as a courtesy. We want to bring to your attention some vulnerabilities across versions of WHM/cPanel. HTTP Request Smuggling (CVE-2026-58047) Database Privilege Escalation (CVE-2026-58048) Exim .forward Privilege Escalation (GCVE-25-2026-07-45-3) Affected Software Plesk - All WHM/cPanel versions before the ...

Security Advisory: New Blind SQL Injection Vulnerability in Plesk's XML-RPC API

First posted on Tuesday, 28 July 2026 This advisory is provided as a courtesy. We want to bring to your attention a newly discovered vulnerability in all versions of Plesk hosting control panel. The security vulnerability allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database through Plesk's XML-RPC API. Impact: An ...

Security Advisory: New High Severity Vulnerabilities in WHM/cPanel

First posted on Tuesday, 19 May 2026 This advisory is provided as a courtesy. We want to bring to your attention some newly discovered vulnerabilities across versions of cPanel and WHM. The CVE details have not been published for security reasons. A cPanel and WHM security patch is expected to be released on Wednesday, 20 May 2026 at 08:00pm Singapore time (GMT+0800). When the security patch ...