PatchTheCVEehcp vulnerabilities
Recent CVEs affecting ehcp products. 6 tracked.
ehcp has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-22. Highest priority: CVE-2025-50926 (score 37/100).
- CVE-2025-50928 MEDIUM 4.8 DOWNGRADE Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id
- CVE-2025-50927 MEDIUM 6.3 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allo
- CVE-2025-50926 MEDIUM 6.5 DOWNGRADE Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id
- CVE-2025-50860 MEDIUM 5.4 DOWNGRADE SQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated
- CVE-2025-50859 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel (EHCP) 20.04.1.b
- CVE-2025-50858 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel (EHCP) 20.04
FAQ
How do I fix ehcp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ehcp being exploited right now?
None of the tracked ehcp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ehcp CVE should I patch first?
CVE-2025-50926 currently ranks highest (37/100): Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id .