HIGH

CVE-2026-105475

Published 2026-11-02 CVSS v4.0
View on NVD View on MITRE Check if this affects your version
CVSS Score
8.7

Description

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Weakness Classification (CWE)

CWE-158

References

https://support.cpanel.net/hc/en-us/articles/44356591132439-Security-CVE-2026-105475-Unauthenticated-Access-to-Calendar-and-Contact-Data-in-cPanel-WHM-October-20th-2026

Primary Sources

Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.

NVD — NIST Official CVE enrichment, CVSS, CPE
MITRE CVE Program Official CVE record of authority

Does this affect your version?

Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.

Open Detector
Back to CVE Dashboard Search Other CVEs
CVE data aggregated from the National Vulnerability Database (NVD, public domain) and enriched by dbcve.org.