Medium SEVERITY — Vulnerability

CVE-2026-58047 — HTTP Smuggling in cPanel allows potential leak of credentials.

HTTP Smuggling in cPanel allows potential leak of credentials.

Platform

cPanel & WHM

CVE Record

CVE-2026-58047

CVSS Score

5.6/10

Published

31 July 2026

Views

Summary

HTTP Smuggling in cPanel allows potential leak of credentials.

Assessment

CVE: CVE-2026-58047
CVSS base score: 5.6
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Source: NVD record

References

Action

Verify affected systems against your inventory
Apply the vendor patch during a maintenance window
Restrict access at the network layer until patched

cPanel & WHM — Related Advisories

VIEW ALL →

cPanel & WHM 01 Sep 2026

High · 8.7

CVE-2026-65643 — Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

CVE-2026-65643 Vulnerability 20

cPanel & WHM 31 Jul 2026

Critical · 9.4

CVE-2026-58048 — Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context.

CVE-2026-58048 Vulnerability 29

cPanel & WHM 15 Jun 2026

Critical

CVE-2026-54420 — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

CVE-2026-54420 CISA-KEV Vulnerability 33