Вернуться к предупреждениям о безопасности

Sitejet Builder 4.13.1-1 — cPanel & WHM Update

Sitejet Builder 4.13.1-1 is a security update that ships an updated build-time library to resolve CVE-2026-40175, a header-injection flaw (CWE-113, CVSS 4.8) in the library the builder was built with. cPanel customers should update the Sitejet Builder package to pick up the rebuilt binary.

High 4.8 CVSS 2026-09-30

cPanel

Затронутые версии

4.13.1-1

Что это значит по лицензии SharedLicense

CWE-113 covers HTTP response splitting — crafted input can inject headers into responses, enabling cache poisoning or cross-site scripting against the affected component.

Sitejet Builder 4.13.1-1

2026 September 17

Security update

Sitejet Builder ships with an updated build-time library to resolve CVE-2026-40175.

For a full list of changes, read the Sitejet Builder change log.

Часто задаваемые вопросы

What is CVE-2026-40175?

It is a vulnerability (CWE-113 — HTTP response/header injection, CVSS 4.8) in a build-time library that Sitejet Builder shipped with. cPanel rebuilt Sitejet Builder 4.13.1-1 (September 17, 2026) against the fixed library.

Which Sitejet versions are affected?

Sitejet Builder packages before 4.13.1-1. The 4.13.1-1 release marker indicates the rebuilt build with the updated library.

How do I update Sitejet Builder?

Update cPanel packages with sudo /scripts/upcp --force or via the package manager, then confirm the version in WHM's Sitejet section shows 4.13.1-1 or later.

Is CVE-2026-40175 actively exploited?

No exploitation is reported in cPanel's release note, and the severity is moderate (CVSS 4.8). Update on your normal patching cycle rather than as an emergency.

Источники

Предупреждения о безопасности

Проверьте систему на уязвимости

Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.

Проверьте свою систему

Sitejet Builder 4.13.1-1

Security update

Часто задаваемые вопросы

Похожие предупреждения

Проверьте систему на уязвимости