CVE-2021-38589: cPanel

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588).

Affected products

• cPanel cPanel: before 11.96.0.13 (fixed in 11.96.0.13)

Published 2021-08-11. Last modified 2026-06-17.