CVE-2026-58047

MEDIUM

Webpros cPanel - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Title source: rule

STIX 2.1

Description

HTTP Smuggling in cPanel allows potential leak of credentials.

References (2)

Core 2

Core References

https://support.cpanel.net/hc/en-us/articles/42285024734743-Security-CVE-2026-58047-HTTP-Request-Smuggling

https://docs.cpanel.net/changelogs/138-change-log

Scores

CVSS v4 5.6

EPSS 0.0052

EPSS Percentile 41.3%

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-444

Status published

Products (7)

WebPros/cPanel 11.110.0.137

WebPros/cPanel 11.118.0.71

WebPros/cPanel 11.126.0.78

WebPros/cPanel 11.134.0.48

WebPros/cPanel 11.136.0.32

WebPros/cPanel 11.137.9999.99

WebPros/WP Squared 11.138.1.6

Published Jul 31, 2026

Tracked Since Jul 31, 2026