This vulnerability, tracked as CVE-2026-58047 and categorized under CWE-444 (HTTP Request Smuggling), affects multiple specific versions of WebPros cPanel. It allows an attacker to perform HTTP request smuggling, potentially causing leakage of credentials. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction needed, low confidentiality and integrity impact, no availability impact, high scope and impact severity, and low security requirements for attack. The vulnerability is published and assigned by HackerOne but currently lacks a remediation level or patch. No exploits are known to be active in the wild.

An attacker exploiting this vulnerability could potentially cause leakage of credentials due to HTTP request smuggling. The impact is rated medium severity with partial confidentiality and integrity impact but no availability impact. The attack requires user interaction and can be performed remotely without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been provided by the vendor. Users should monitor vendor communications for updates and apply patches once available.