s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-2026-105475

📛 CVE Title

CVE-2026-105475

⬇ Download JSON ⚠ View as Threat

Description

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Overview

State
PUBLISHED
Assigner (CNA)
hackerone
CVSS severity
HIGH
CVSS score
CVSS 8.7 / 10 8.7 8.7 / 10
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Effective score
8.7 / 10 HIGH source: CNA overview
CWE(s)
CWE-158
Reserved
2026-10-05
Published
2026-11-02 21:05 UTC
Last updated
2026-11-02 21:25 UTC
Source
https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105475.json
Linked Threat
CVE-2026-105475 — CVE-2026-105475

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID
EUVD-2026-115630

EUVD enrichment is queued; refresh the page in a few seconds.

Affected products (1)
VendorProductVersionsPlatforms
WebPros cPanel 0 (affected), 0 (affected), 0 (affected), 0 (affected) —

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

  • CVE-2026-105475 - cPanel NUL Byte Injection Information Disclosure
    web:cvefeed.io

    The following list is the news that have been mention CVE-2026-105475 vulnerability anywhere in the article. Results are limited to the first 20 news articles due to potential performance issues. The following table lists the changes that have been made to the CVE-2026-105475 vulnerability over time.

    2026-11-03 11:22 UTC
  • CVE Vulnerabilities 2026: Critical Flaws & Fixes Hub
    web:cyberupdates365.com

    Track critical CVE vulnerabilities 2026 with verified enterprise patch guides. Fix zero-days across VMware, WordPress, Windows, and cloud infrastructure.

    2026-11-03 11:22 UTC
  • 2026 Catalog Release History - Patch My PC
    web:patchmypc.com

    You can find the production release history below for 2026 . View the 2025 Catalog Release History.

    2026-11-03 11:22 UTC
  • CVE-2026-105475 - cPanel Vulnerability Enables Reading Mail…
    web:vulmon.com

    cPanel Vulnerability Enables Reading Mail Account Calendar and Contact Data. Remote attackers can read any mail account's calendar and contact data in cPanel…

    2026-11-03 11:22 UTC
  • What Is CVE Remediation in 2026? - aikido.dev
    web:www.aikido.dev

    None of these is a clean fix , which is why the decision on how to remediate depends on knowing what package versions are running in production and why. This post will cover how AI has accelerated CVE detection and discovery, the upgrade trap, what CVE remediation actually involves in 2026 , and how to solve the CVE remediation problem.

    2026-11-03 11:22 UTC
  • Oracle Critical Patch Update Advisory - July 2026
    web:www.oracle.com

    This Critical Patch Update contains 1448 new security patches across the product families listed below. Please note that a My Oracle Support (MOS) note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at July 2026 Critical Patch Update: Executive Summary and Analysis.

    2026-11-03 11:22 UTC
  • Oracle Critical Security Patch Update Advisory - September 2026
    web:www.oracle.com

    Prior Critical Patch Update and Critical Security Patch Update advisories should be reviewed for information regarding earlier published security patches. Refer to Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins for information about Oracle Security advisories.

    2026-11-03 11:22 UTC
  • CVE-2026-105475: WebPros cPanel: Improper neutralization of a ... - Rapid7
    web:www.rapid7.com

    CVE-2026-105475 : WebPros cPanel: Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…. View severity, references, and remediation details from Rapid7.

    2026-11-03 11:22 UTC
  • CVE-2026-105475 | Tenable®
    web:www.tenable.com

    Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

    2026-11-03 11:22 UTC
  • CVE-2026-105475: cPanel Security Vulnerability - Analysis & Fix ...
    web:www.thehackerwire.com

    How do I fix or mitigate CVE-2026-105475 ? To protect against CVE-2026-105475 , you should: (1) Apply the latest security patches from the vendor, (2) Check official security advisories for specific remediation steps, (3) Update affected software to the latest version, and (4) Monitor your systems for any signs of exploitation.

    2026-11-03 11:22 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-105475.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-105475",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-02T21:22:08.509417Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-02T21:25:25.032Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "cPanel",
          "vendor": "WebPros",
          "versions": [
            {
              "lessThan": "11.138.0.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "11.136.0.51",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "11.134.0.67",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "11.110.0.154",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "rz1027 (rz1027)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-158",
              "description": "CWE-158 Improper Neutralization of Null Byte or NUL Character",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T21:05:16.277Z",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "url": "https://support.cpanel.net/hc/en-us/articles/44356591132439-Security-CVE-2026-105475-Unauthenticated-Access-to-Calendar-and-Contact-Data-in-cPanel-WHM-October-20th-2026"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2026-105475",
    "datePublished": "2026-11-02T21:05:16.277Z",
    "dateReserved": "2026-10-05T15:00:00.728Z",
    "dateUpdated": "2026-11-02T21:25:25.032Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}