WebPros security advisory (AV26-908)

Serial number: AV26-908
Date: September 10, 2026

As of September 10, 2026, WebPros is affected by vulnerabilities in the following products:

  • cPanel & WebHost Manager (WHM) software
    • Prior to 11.110.0.143
    • Prior to 11.134.0.55
    • Prior to 11.136.0.39
    • Prior to 11.138.0.4
    • Prior to WP2: 11.138.1.9
  • ConfigServer Security & Firewall (CSF) software
    • Versions 14.00 to 16.29 (CVE-2026-65638)
    • Versions 2.15 to 16.29 (CVE-2026-65639)

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Date modified: