HTTP Smuggling Vulnerability in cPanel Affects Credential Security
CVE-2026-58047

5.6MEDIUM

Key Information:

Vendor

Webpros

Status
Cpanel
WP Squared
Vendor
CVE Published:
31 July 2026

Badges

đź“° News Worthy

What is CVE-2026-58047?

The HTTP Smuggling vulnerability in cPanel poses a serious risk, enabling attackers to potentially exploit HTTP requests to leak sensitive credentials. By manipulating how HTTP requests are processed, threat actors can bypass security measures, leading to unauthorized access to user information. This vulnerability affects multiple versions of cPanel & WHM, emphasizing the importance of prompt software updates to prevent exploitation.

Affected Version(s)

cPanel 0 < 11.110.0.137

cPanel 0 < 11.126.0.78

cPanel 0 < 11.134.0.48

News Articles

favicon imageSwapupdate

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

î „Swati Khandelwalî ‚Aug 04, 2026Vulnerability / Database Security

3 weeks ago

References

https://support.cpanel.net/hc/en-us/articles/422850247347...
https://docs.cpanel.net/changelogs/138-change-log

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • đź“°

    First article discovered by Swapupdate

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vincent55 Yang
.