Dashboard / CVE-2026-29205

CVE-2026-29205

HIGH
MEDIUM Priority: 0.72 BB Relevance: 79/100
Published: 2026-05-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: Low
A: Low

Description

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.

Weakness Classification (1)

Affected Software (14)

VendorProductVersion
cpanel cpanel 120.0.0 – 124.0.38
cpanel cpanel 126.0.0 – 126.0.59
cpanel cpanel 130.0.0 – 130.0.23
cpanel cpanel 130.0.23 – 130.0.23
cpanel cpanel 132.0.0 – 132.0.32
cpanel cpanel 134.0.0 – 134.0.26
cpanel cpanel 136.0.0 – 136.0.10
cpanel whm 120.0.0 – 124.0.38
cpanel whm 126.0.0 – 126.0.59
cpanel whm 130.0.0 – 130.0.23
cpanel whm 132.0.0 – 132.0.32
cpanel whm 134.0.0 – 134.0.26
cpanel whm 136.0.0 – 136.0.10
cpanel wp_squared 120.1.0 – 136.1.12

References & Advisories (1)

Bug Bounty Relevance

79 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.6 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS — Exploitation Probability

8.37%
Raw Score 0.083730
Percentile 95.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.08373
2026-10-28
0.08373

Intelligence Sources

nvd ref →

External Links