WebPros

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 1, 2026
Last mentionedSep 23, 2026

Timeline

2 articles · newest first

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

cPanel patched three flaws, including a root code-execution bug any hosting account can use to seize the server.

The Hacker NewsSep 23, 12:16 UTC · Sep 23, 2026VulnerabilityCVE-2026-87899 CVE-2026-87900 CVE-2026-684904 · 1 read

WebPros security advisory (AV26-866)

Canada's Cyber Centre relays a WebPros advisory for CVE-2026-67394, a Plesk privilege escalation flaw to root, fixed in 18.0.79.9 and 18.0.80.5.

Canadian Centre for Cyber SecuritySep 1, 13:34 UTC · Sep 1, 2026AdvisoryCVE-2026-673941 · 1 read

Related CVEs

by mentions

CVE-2026-878999.4
Authenticated Privilege Escalation to Root RCE in cPanel & WHM
published Sep 23, 2026cPanel, L.L.C. cPanel & WHM
CVE-2026-879009.4
Argument Injection in WP Toolkit for cPanel Allows Cross-Account File Read and RCE
published Sep 23, 2026Plesk / WebPros (WP Toolkit) WP Toolkit for cPanel
CVE-2026-673941%9.0
Command Injection Local Privilege Escalation in Plesk for Linux
published Sep 1, 2026Plesk (WebPros) Plesk for Linux
CVE-2026-684908.2
CalDAV/CardDAV Permission Flaw in cPanel Lets Local Users Read Other Accounts' Data
published Sep 23, 2026cPanel (cPanel, L.L.C. / WebPros) cPanel & WHM (CalDAV/CardDAV calendar and contacts service)

Appears with

WebProsvendor · 2
Pleskproduct · 2
WP Toolkitproduct · 1
cPanelorganization · 1
Canadian Centre for Cyber Securityorganization · 1
Canadian Centre for Cyber Securityvendor · 1
WHMproduct · 1
cPanelproduct · 1
cPanelvendor · 1
WP Squaredproduct · 1

Entities are extracted by the model from each article. First seen Sep 1, 2026, last mentioned Sep 23, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.