InMotion Hosting incident

cPanel & WHM Login Authentication Vulnerability

Minor Resolved View vendor source →

InMotion Hosting experienced a minor incident on May 1, 2026, lasting 3d 19h. The incident has been resolved; the full update timeline is below.

Started
May 01, 2026, 04:19 AM UTC
Resolved
May 04, 2026, 11:34 PM UTC
Duration
3d 19h
Detected by Pingoru
May 01, 2026, 04:19 AM UTC

Update timeline

  1. investigating May 01, 2026, 04:19 AM UTC

    A critical vulnerability was recently identified in the cPanel software regarding an authentication login exploit. This affects all currently supported versions of cPanel. In order to best protect our customers, WHM/cPanel logins may be inaccessible for some servers until all patches have been released, applied, and validated. We thank you for your patience. You can find more information from cPanel [HERE.](https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication)

  2. resolved May 04, 2026, 11:34 PM UTC

    Please follow our [blog post](https://www.inmotionhosting.com/support/news/cpanel-cve-2026-41940-follow-up/) to view our full response or check your email to see if you were affected by this cPanel vulnerability.