Threats tagged 'ghsa-85qr-8rxc-62gv'

An authentication bypass vulnerability exists in cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5. This flaw allows unauthenticated remote attackers to gain unauthorized access to the control panel. The vulnerability has a critical severity with a CVSS score of 9.8. Public exploit code is available through Metasploit and Exploit-DB, and detection templates exist for automated scanning. No cloud service is involved, and there is no indication of exploitation in the wild at this time.