PT-2026-135820

CVE-2026-105475

Published

2026-11-02

Updated

2026-11-02

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾