cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel and WHM have released patches for three vulnerabilities that could lead to privilege escalation, code execution, and denial-of-service attacks.

• •CVE-2026-29201 (CVSS 4.3): Insufficient input validation in feature file name handling allows arbitrary file read
• •CVE-2026-29202 (CVSS 8.8): Improper validation of plugin parameter in create_user API enables arbitrary Perl code execution
• •CVE-2026-29203 (CVSS 8.8): Unsafe symlink handling allows file permission modification leading to DoS or privilege escalation
• •Patches available across multiple version branches from 11.86.0.43 and higher
• •No evidence of exploitation in the wild, though similar CVE-2026-41940 is being weaponized

This summary was automatically generated by AI based on the original article and may not be fully accurate.