Sploitus

2 exploited vulnerabilities in Cpanel & Whm

Vulnerabilities with publicly known exploits

Vendors
WordPress, Cpanel
With known exploits
2
Affected Cpanel versions
< 86.0.41, 110.0.97, 118.0.63, 124.0.35, 126.0.54, 130.0.19, 132.0.29, 134.0.20, 136.0.5, 11.34.0
Affected Cpanel Whm versions
= 11.34.0

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2026-41940 154 exploits
CVSS 9.8 CRITICAL 2026-04-29FIX AVAILABLE
CVE-2012-6449
CVSS 5.4 MEDIUM 2020-02-10FIX AVAILABLE