← All advisories

Medium severity6.5NVD Advisory· Published Nov 27, 2020· Updated Jun 17, 2026

CVE-2020-29136

CVE-2020-29136

Description

In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

CPanel/Cpanel2 versions
cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*range: <11.86.0.32
- (no CPE)range: <90.0.17
cPanel/cPaneldescription

Patches

Vulnerability mechanics

References

3

docs.cpanel.net/changelogs/90-change-log/nvdVendor Advisory
news.cpanel.com/cpanel-tsr-2020-0007-full-disclosure/nvdVendor Advisory
www.digitaldefense.com/news/zero-day-cpanel-and-webhost-manager/nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.