catalyst2 incident
cPanel, WHM, Webmail, WebDAV and CalDAV Unavailable
catalyst2 experienced a notice incident on April 28, 2026 affecting Dedicated Servers and Shared Hosting, lasting 21d 16h. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- investigating Apr 28, 2026, 08:53 PM UTC
We have been notified by cPanel about an emerging security issue related to cPanel sofware. As a result we have taken mitigating steps to disable cPanel, WHM, Webmail, WebDAV and CalDAV globally until more information is available. We appreciate your understanding whilst this is fully investigated.
- identified Apr 28, 2026, 11:36 PM UTC
cPanel have released an update to address this issue and it is being applied. We will maintain restricted access until the morning of Wednesday 29th to allow full evaluation and application of the corrective update.
- identified Apr 29, 2026, 11:03 AM UTC
We have installed the cPanel provided patch for this issue, and are continuing to monitor before opening cPanel access again, we apologise for the restrictions and will update this page when we have further information.
- monitoring Apr 29, 2026, 01:52 PM UTC
We have completed our internal checks and are monitoring this closely, cPanel access has been restored. Again apologies for the inconvenience caused.
- monitoring Apr 30, 2026, 01:59 PM UTC
As all cPanel services are now available, we are closing this service-unavailable incident.
- monitoring Apr 30, 2026, 04:38 PM UTC
We are continuing to monitor for any further issues.
- monitoring May 20, 2026, 01:16 PM UTC
We are continuing to monitor for any further issues.
- resolved May 20, 2026, 01:16 PM UTC
This incident has been resolved.