CVE-2026-29205
Full vulnerability record from the local CVENow database.
Description
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
Severity
HIGH
CVSS score
8.6
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-13 22:16:42.817000
Last modified
2026-10-26 14:10:00.130000
View original CVE JSON
{
"id": "CVE-2026-29205",
"sourceIdentifier": "[email protected]",
"published": "2026-05-13T22:16:42.817",
"lastModified": "2026-10-26T14:10:00.130",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints."
},
{
"lang": "es",
"value": "Gestión incorrecta de privilegios y filtrado de rutas insuficiente permiten leer un archivo arbitrario en el servidor a través de los puntos finales de descarga de archivos adjuntos de cpdavd."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "WebPros",
"product": "cPanel",
"defaultStatus": "unaffected",
"versions": [
{
"version": "11.136.0.0",
"lessThan": "11.136.0.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.134.0.0",
"lessThan": "11.134.0.26",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.132.0.0",
"lessThan": "11.132.0.32",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.130.0.0",
"lessThan": "11.130.0.23",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.126.0.0",
"lessThan": "11.126.0.59",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.120.0.0",
"lessThan": "11.124.0.38",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "WebPros",
"product": "WP Squared",
"defaultStatus": "unaffected",
"versions": [
{
"version": "11.120.1.0",
"lessThan": "11.136.1.12",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 4.7
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-14T13:13:34.728020Z",
"id": "CVE-2026-29205",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-250"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "120.0.0",
"versionEndExcluding": "124.0.38",
"matchCriteriaId": "8C95EF6B-A471-41FD-8B65-32E3B3A2C066"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "126.0.0",
"versionEndExcluding": "126.0.59",
"matchCriteriaId": "CF4EC0BD-A3D9-4508-A203-AE7C3FD7B7B4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "130.0.0",
"versionEndExcluding": "130.0.23",
"matchCriteriaId": "3C684F0A-4C2D-44DD-8AFB-EDD961B37161"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "130.0.23",
"versionEndExcluding": "130.0.23",
"matchCriteriaId": "69C8900C-A2C1-411E-B86D-53B20F07207E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "132.0.0",
"versionEndExcluding": "132.0.32",
"matchCriteriaId": "C72D46EF-7010-4BF0-B227-4FB6F2594956"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "134.0.0",
"versionEndExcluding": "134.0.26",
"matchCriteriaId": "1111E4FB-BE6E-46B6-B506-44B396A4104A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "136.0.0",
"versionEndExcluding": "136.0.10",
"matchCriteriaId": "0193B98A-BF31-48D9-A0A0-F5FEB8E8EE45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:wp_squared:*:*:*:*:*:wordpress:*:*",
"versionStartIncluding": "120.1.0",
"versionEndExcluding": "136.1.12",
"matchCriteriaId": "A8ADEB08-7DC8-4B45-B717-E011E48076F1"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "120.0.0",
"versionEndExcluding": "124.0.38",
"matchCriteriaId": "FDFD9D2E-515E-4BBE-A172-9F562A53DD2C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "126.0.0",
"versionEndExcluding": "126.0.59",
"matchCriteriaId": "1DC95DCA-C5D9-48F6-BBA9-7A5AE81DCFEE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "130.0.0",
"versionEndExcluding": "130.0.23",
"matchCriteriaId": "2A46F223-05E9-4B7E-86DE-3FC2B33AAE91"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "132.0.0",
"versionEndExcluding": "132.0.32",
"matchCriteriaId": "0C1C3084-F8B2-44BA-8BEA-0EB13D746061"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "134.0.0",
"versionEndExcluding": "134.0.26",
"matchCriteriaId": "C6AA26F4-2086-46CC-AA7C-6BACBFF7688B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "136.0.0",
"versionEndExcluding": "136.0.10",
"matchCriteriaId": "A3C3BB3C-A3AB-4F56-BE36-F7BC14BB7554"
}
]
}
]
}
],
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/40437020299927-Security-CVE-2026-29205-cPanel-WHM-WP2-Security-Update-May-13-2026",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}