CVE-2026-29205

high

Description

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.

References

https://github.com/MillerDetach/poc-lab-pro

https://github.com/SmashMythAmp/poc-lab-605

https://github.com/LadyAqueduct/poc-lab-798

https://github.com/BlackRainSentinel/cPanel-patch-radar

https://github.com/Unclecheng-li/poc-lab

https://slcyber.io/research-center/new-age-of-collisions-reading-arbitrary-files-pre-auth-as-root-in-cpanel-cve-2026-29205/

https://github.com/assetnote/cpanel2shell-scanner

https://support.cpanel.net/hc/en-us/articles/40437020299927-Security-CVE-2026-29205-cPanel-WHM-WP2-Security-Update-May-13-2026

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30178

Details

Source: Mitre, NVD

Published: 2026-05-13

Updated: 2026-08-12

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:P/A:P

Severity: High

CVSS v3

Base Score: 8.6

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L