CVE-2026-29205 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.6 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 29.07%

Affected Products (NVD)

Vendor	Product	Version
cpanel	cpanel	120.0.0 ≤ 𝑥 < 124.0.38
cpanel	cpanel	126.0.0 ≤ 𝑥 < 126.0.59
cpanel	cpanel	130.0.0 ≤ 𝑥 < 130.0.23
cpanel	cpanel	130.0.23 ≤ 𝑥 < 130.0.23
cpanel	cpanel	132.0.0 ≤ 𝑥 < 132.0.32
cpanel	cpanel	134.0.0 ≤ 𝑥 < 134.0.26
cpanel	cpanel	136.0.0 ≤ 𝑥 < 136.0.10
cpanel	wp_squared	120.1.0 ≤ 𝑥 < 136.1.12
cpanel	whm	120.0.0 ≤ 𝑥 < 124.0.38
cpanel	whm	126.0.0 ≤ 𝑥 < 126.0.59
cpanel	whm	130.0.0 ≤ 𝑥 < 130.0.23
cpanel	whm	132.0.0 ≤ 𝑥 < 132.0.32
cpanel	whm	134.0.0 ≤ 𝑥 < 134.0.26
cpanel	whm	136.0.0 ≤ 𝑥 < 136.0.10

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-250 - Execution with Unnecessary Privileges
The software performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References

https://support.cpanel.net/hc/en-us/articles/40437020299927-Security-CVE-2026-29205-cPanel-WHM-WP2-Security-Update-May-13-2026