Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2021-26266: cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).
CVE-2021-26266 · published 5 years ago
Summary
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).
What to do
- Update cpanel cpanel to version 92.0.9 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cpanel | cpanel |
< 92.0.9 cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* |
Original advisory text
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).
References
- https://docs.cpanel.net/changelogs/92-change-log/ Release Notes Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published26 Jan 2021
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-26266 · NVD
Track software like this
Free during beta