CVE-2026-58047: WebPros cPanel

Medium severity, CVSS 5.6. EPSS: 0.5% chance of exploitation in the next 30 days.

HTTP Smuggling in cPanel allows potential leak of credentials.

Affected products

• WebPros cPanel: before 11.110.0.137 (fixed in 11.110.0.137); before 11.126.0.78 (fixed in 11.126.0.78); before 11.134.0.48 (fixed in 11.134.0.48); before 11.136.0.32 (fixed in 11.136.0.32); before 11.137.9999.99 (fixed in 11.137.9999.99); before 11.118.0.71 (fixed in 11.118.0.71)
• WebPros Wp Squared: before 11.138.1.6 (fixed in 11.138.1.6)

Published 2026-07-31. Last modified 2026-09-03.