WebPros cPanel and WHM Authentication Bypass via Login Flow
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- Fix
- Fixed in 11.86.0.41, 11.94.0.28, 11.102.0.39, 11.110.0.97, 11.118.0.63, and 7 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 on Exploit-DB
- Exploitation: active
- Automatable: yes
- Technical impact: total
Summary
This vulnerability affects WebPros cPanel and WHM, which are web hosting control panel software used to manage servers and websites. An unauthenticated remote attacker could exploit a flaw in the login process to bypass authentication and gain unauthorized access to the control panel.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
Timeline
- CISA SSVC assessment
Exploitation: active · Automatable: yes · Technical impact: total
- CVE published
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- CISA remediation deadline
Due date for US federal agencies to patch
- Public exploit on Exploit-DB
EDB-52574
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- WebPros cPanel
From 11.40.0.0 · fixed in 11.86.0.41; From 11.88.0.0 · fixed in 11.94.0.28; From 11.96.0.0 · fixed in 11.102.0.39; From 11.104.0.0 · fixed in 11.110.0.97; From 11.112.0.0 · fixed in 11.118.0.63; From 11.120.0.0 · fixed in 11.124.0.35; From 11.126.0.0 · fixed in 11.126.0.54; From 11.128.0.0 · fixed in 11.130.0.19; From 11.132.0.0 · fixed in 11.132.0.29; From 11.134.0.0 · fixed in 11.134.0.20; From 11.136.0.0 · fixed in 11.136.0.5
- WebPros WP Squared
fixed in 11.136.1.7
- WebPros WHM
From 11.40.0.0 · fixed in 11.86.0.41; From 11.88.0.0 · fixed in 11.94.0.28; From 11.96.0.0 · fixed in 11.102.0.39; From 11.104.0.0 · fixed in 11.110.0.97; From 11.112.0.0 · fixed in 11.118.0.63; From 11.120.0.0 · fixed in 11.124.0.35; From 11.126.0.0 · fixed in 11.126.0.54; From 11.128.0.0 · fixed in 11.130.0.19; From 11.132.0.0 · fixed in 11.132.0.29; From 11.134.0.0 · fixed in 11.134.0.20; From 11.136.0.0 · fixed in 11.136.0.5