CVE-2017-18406

HIGH 7.5CVE-2017-18406 · Published 02/08/2019 · updated 17/06/2026

In short

CVE-2017-18406 is a HIGH (CVSS 7.5) vulnerability affecting cpanel (cpanel).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.4% of all vulnerabilities.
Fix: update to 64.0.40, 66.0.23, 67.9999.103 or later.

Package	Affected versions	Patched versions
cpanel cpanel	`≥ 63.9999.74, < 64.0.40≥ 65.9999.38, < 66.0.23≥ 67.9999.64, < 67.9999.103`	`64.0.4066.0.2367.9999.103`

cPanel before 67.9999.103 allows SQL injection during eximstats processing (SEC-276).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 63.9999.74, < 64.0.40≥ 65.9999.38, < 66.0.23≥ 67.9999.64, < 67.9999.103

64.0.4066.0.2367.9999.103

More vulnerabilities in cpanel

See all →