NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-58047

CVSS 4.0: 5.6 medium
EPSS: <1%p43
Published: Jul 31, 2026 · Jul 31, 2026
Modified: Sep 3, 2026

Analyze CVE-2026-58047 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

HTTP Smuggling in cPanel allows potential leak of credentials.

Weakness: CWE-444

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

2 stories

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel patched critical flaw CVE-2026-65643 letting authenticated hosting customers with addon or parked domain rights execute code as root and fully compromise servers.

The Hacker NewsAug 28, 09:45 UTC · Aug 28, 2026VulnerabilityCVE-2026-65643 CVE-2026-58048 CVE-2026-58047+31

68

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

The Hacker NewsAug 4, 10:36 UTC · Aug 4, 2026VulnerabilityCVE-2026-58048 CVE-2026-580472 · 1 read

60