Skip to content

CVE-2026-29201

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
May 10, 2026
Last Seen
May 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Vulnerabilities in cPanel & WHM Posed Security Risks74.0

On May 8, 2026, cPanel & WHM released patches for three critical vulnerabilities: CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203. CVE-2026-29201 allows arbitrary file reads due to inadequate validation in the LOADFEATUREFILE call. CVE-2026-29202 involves a Perl code injection in the create_user...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCloudLinuxCVE-2026-29202CVE-2026-29203CWE-200 - Exposure of Sensitive InformationCWE-269 - Improper Privilege ManagementCWE-94 - Code InjectionT1068 - Exploitation for Privilege EscalationT1059 - Command and Scripting InterpreterCentOS 6CloudLinux 6CPanel & WHM