Vulnerability · Published Jul 31, 2026 · Assigned by hackerone
CVE-2026-58047
Medium 5.6
In plain English
A medium-severity security flaw in cPanel from WebPros. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 4.0)5.6Medium
Exploit odds (30 days)0.5%top 55.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HTTP Smuggling in cPanel allows potential leak of credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WebPros | cPanel | 0 – before 11.110.0.1370 – before 11.126.0.780 – before 11.134.0.480 – before 11.136.0.320 – before 11.137.9999.990 – before 11.118.0.71 |
| WebPros | WP Squared | 0 – before 11.138.1.6 |
Weakness: CWE-444 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L