Whm
Vendor:
First CVE: Jul 19, 2017 · Active for 9 years
3
Total CVEs
More Total CVEs than 64% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
6.9
Avg CVSS
Higher Avg CVSS than 39% of tracked products
33.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Whm over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 19, 2017
9 years ago
Most Recent CVE
Apr 29, 2026
87 days ago
CVE Severity & Scoring
Whm3 CVEs
67%
33%
All CVEs352,708 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network3 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (33.3%)
Unknown0 (0.0%)
Required2 (66.7%)
Privileges Required
Low2 (66.7%)
High0 (0.0%)
None1 (33.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-41940CRITICAL cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the | Apr 29, 2026 | 9.8 | 99 | YES | YES |
CVE-2012-6449MEDIUM The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. | Feb 10, 2020 | 5.4 | 19 | NO | NO |
CVE-2017-11441MEDIUM The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a l | Jul 19, 2017 | 5.4 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (3 CVEs).
CISA KEV
1 CVE
33.3% of CVEs· 98th percentile
Metasploit
1 CVE
33.3% of CVEs· 98th percentile
Nuclei
1 CVE
33.3% of CVEs· 98th percentile
ExploitDB
1 CVE
33.3% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (3 CVEs).
Media Mentions
Signals from CVEs in this product scope (3 CVEs).
Top CNAs Publishing CVEs For Whm
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 66.0.1 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.9 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.7 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.4 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.32 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.31 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.30 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.3 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.29 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.28 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.27 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.24 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.22 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.21 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.20 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.2 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.19 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.18 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.17 | 1 | 5.4 | 0.5% | 0 | 0 |
| 64.0.15 | 1 | 5.4 | 0.5% | 0 | 0 |