VDB
CVE-2026-40686
CVE-2026-40686
PUBLISHED
CVSS 8.699999809265137 HIGH
Exim (EXperimental Internet Mailer) ist ein Mailserver und Mail Transfer Agent. cPanel ist eine Software für die Verwaltung von Webhosting Auftritten. Die Software ermöglicht es dem Endanwender, Statistiken einzusehen, neue Benutzeraccounts anzulegen, Maileinstellungen zu verändern und vieles mehr.
EPSS 0.25% · 16.2th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.25%
16.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source Exim <4.99.2 | |
| cPanel | cPanel cPanel/WHM <134.0.30 | |
| cPanel | cPanel cPanel/WHM <110.0.112 | |
| cPanel | cPanel cPanel/WHM <136.0.7 | |
| cPanel | cPanel cPanel/WHM 126.0.63 | |
| cPanel | cPanel cPanel/WHM <118.0.64 | |
| Debian | Debian Linux | |
| cPanel | cPanel cPanel/WHM <126.0.56 | |
| Ubuntu | Ubuntu Linux | |
| cPanel | cPanel cPanel/WHM <136.0.14 | |
| cPanel | cPanel cPanel/WHM <137.9999.96 | |
| cPanel | cPanel cPanel/WHM <134.0.23 |
Timeline
- Apr 30, 2026 CVE Published
- Apr 30, 2026 PoC Published
- May 1, 2026 Security Advisory
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
References
- https://ubuntu.com/security/notices/USN-8228-1 advisory
- https://lists.debian.org/debian-security-announce/2026/msg00176.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1334.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1334 advisory
- https://lists.exim.org/lurker/message/20260429.121733.f58d9686.en.html advisory
- https://docs.cpanel.net/changelogs/110-change-log/ advisory
- https://docs.cpanel.net/changelogs/118-change-log/ advisory
- https://docs.cpanel.net/changelogs/126-change-log/ advisory
- https://docs.cpanel.net/changelogs/134-change-log/ advisory
- https://docs.cpanel.net/changelogs/136-change-log/ advisory
- https://docs.cpanel.net/changelogs/138-change-log/ advisory