CVE-2025-43921

Moderate 5.3

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.

Published April 20, 2025.