CVE-2015-9291: cPanel

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221).

Affected products

• cPanel cPanel: before 11.52.0.13 (fixed in 11.52.0.13)

Published 2019-08-01. Last modified 2026-06-17.