Cpanel Whm — known CVE vulnerabilities

Every CVE whose affected-product data names Cpanel Whm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-41940 — CVSS 9.8 (critical) — actively exploited: cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote…
• CVE-2012-6449 — CVSS 5.4 (medium): The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability.
• CVE-2017-11441 — CVSS 5.4 (medium): The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before…