Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Summary

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Remediation

1. Inventory every WebPros cPanel deployment, including staging.
2. Upgrade WebPros cPanel to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Referencehttps://support.cpanel.net/hc/en-us/articles/44356591132439-Security-CVE-2026-105475-Unauthenticated-Access-to-Calendar-and-Contact-Data-in-cPanel-WHM-October-20th-2026