CVE-2017-18406

概要

参考情報

• documentation.cpanel.net/display/CL/68+Change+Log · Product
• news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure · Vendor Advisory

cpanel のその他の脆弱性

• CVE-2026-65643高 8.8Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
• CVE-2026-32992高 8.2SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture…
• CVE-2026-29205高 8.6Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment downloa…
• CVE-2026-41940緊急 9.8悪用確認済み（CISA KEV）cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote atta…
• CVE-2025-66429高 8.8An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of a…