Log in Scan Now

All security reports

NVD security advisoryHigh

High advisory for Improper neutralization of a NUL byte in

CVE-2026-105475 · Reported 2 Nov 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Improper neutralization of a NUL byte inAffected product

Advisory overview

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.

Related references

https://support.cpanel.net/hc/en-us/articles/44356591132439-Security-CVE-2026-105475-Unauthenticated-Access-to-Calendar-and-Contact-Data-in-cPanel-WHM-October-20th-2026

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar an | Security report | Cevnitra