Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
cPanel and WHM Authentication Bypass Vulnerability in Login Flow
Vulnerability
An authentication bypass vulnerability has been identified in cPanel and WHM. This issue affects versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5. The vulnerability allows unauthenticated remote attackers to gain unauthorized access to the control panel by exploiting the login flow.
Impact
Exploitation of this vulnerability allows unauthorized access to the cPanel or WHM control panel, as well as to Webmail, Webdisk, and SSL connections.
Remediation
Users can update to the patched versions of cPanel & WHM by running the command '/scripts/upcp --force'. After the update, cPanel users can verify their version with the command '/usr/local/cpanel/cpanel -V'.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.