Hosting UK incident

cPanel - Security Update

Minor Resolved View vendor source →

Hosting UK experienced a minor incident on July 29, 2026, lasting –. The incident has been resolved; the full update timeline is below.

Started
Jul 29, 2026, 06:21 PM UTC
Resolved
Jul 29, 2026, 06:21 PM UTC
Duration
–
Detected by Pingoru
Jul 29, 2026, 06:21 PM UTC

Update timeline

  1. resolved Jul 29, 2026, 06:21 PM UTC

    A security update for cPanel & WHM is now available. This update resolved multiple vulnerabilities across supported versions of cPanel & WHM, including the following, rated up to High severity. Our team have patched all managed services and servers, un-managed server customers please read below.. CVE-2026-58047 - issue affecting cpsrvd functionality CVE-2026-58048 - issue affecting database functionality GCVE-25-2026-07-45-3 issue affecting Exim mail functionality The update also includes additional security hardening improvements for certain supported operating system configurations. Please follow the instructions in the linked support article and update cPanel to one of the patched versions listed below. Patched versions: 11.110.0.137 11.126.0.78 11.134.0.48 11.136.0.32 11.138.1.6 (WP2) Key Resources: Security: CVE-2026-58047 https://support.cpanel.net/hc/en-us/articles/42285024734743-Security-CVE-2026-58047-HTTP-Request-Smuggling Security: CVE-2026-58048 https://support.cpanel.net/hc/en-us/articles/42285745783703-Security-CVE-2026-58048-Database-Privilege-Escalation Security: GCVE-25-2026-07-45-3 https://support.cpanel.net/hc/en-us/articles/42285884685207-Security-GCVE-25-2026-07-45-3-Exim-forward-Privilege-Escalation?