https://patchfirst.co/vendor/webpros/New and newly exploited WebPros CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-105474/CVE-2026-105474Thu, 15 Oct 2026 00:00:00 GMTWebPros · SolusVM 2. Not in CISA KEV. EPSS 0.5% (higher than 42.2% of CVEs). CVSS 9.4 CRITICAL. Priority 17.2 of 100.https://patchfirst.co/cve/CVE-2026-93698/CVE-2026-93698Fri, 02 Oct 2026 00:00:00 GMTWebpros · cPanel. Not in CISA KEV. EPSS 0.6% (higher than 50.3% of CVEs). CVSS 9.9 CRITICAL. Priority 18.8 of 100.https://patchfirst.co/cve/CVE-2026-41940/CVE-2026-41940#kevThu, 30 Apr 2026 00:00:00 GMTWebPros · cPanel & WHM and WP2 (WordPress Squared). In CISA KEV since 2026-04-30, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.5% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 84.8 of 100.kevransomwarepublic-exploitT1190T1078