QSearchQSearch

CVE-2021-38588

8.1 HIGH

In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587)

Published: 2021-08-11 · Last updated: 2026-06-17

Severity and scoring

CVSS
8.1 HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-494

Affected products

VendorProduct
cpanelcpanel

Description

In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587).

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2021-38590 — In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584) (5.5 MEDIUM)
  • CVE-2021-38589 — In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588) (8.1 HIGH)
  • CVE-2021-38587 — In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586) (7.5 HIGH)
  • CVE-2021-38586 — In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589) (4.4 MEDIUM)
  • CVE-2021-38585 — The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585) (7.2 HIGH)

Same CWE

  • CVE-2026-9037 — A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through...
  • CVE-2026-45058 — electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client
  • CVE-2026-9089 — The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update opera... (8.8 HIGH)
  • CVE-2026-42249 — Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled... (9.8 CRITICAL)
  • CVE-2026-42248 — Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables (9.8 CRITICAL)