← All advisories

High severityNVD Advisory· Published Nov 2, 2026· Updated Nov 2, 2026

CVE-2026-105475

CVE-2026-105475

Description

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Affected products

1

CPanel/Cpanelllm-fuzzy

Patches

Vulnerability mechanics

References

1

support.cpanel.net/hc/en-us/articles/44356591132439-Security-CVE-2026-105475-Unauthenticated-Access-to-Calendar-and-Contact-Data-in-cPanel-WHM-October-20th-2026nvd

News mentions

0

No linked articles in our index yet.