InMotion Hosting incident

cPanel & WHM Login Authentication Vulnerability

Minor Resolved View vendor source →

InMotion Hosting experienced a minor incident on April 29, 2026, lasting 17h 21m. The incident has been resolved; the full update timeline is below.

Started
Apr 29, 2026, 02:29 AM UTC
Resolved
Apr 29, 2026, 07:50 PM UTC
Duration
17h 21m
Detected by Pingoru
Apr 29, 2026, 02:29 AM UTC

Update timeline

  1. investigating Apr 29, 2026, 02:29 AM UTC

    A critical vulnerability was recently identified in the cPanel software regarding an authentication login exploit. This affects all currently supported versions of cPanel. In order to best protect our customers, we will be shutting down all vulnerable ports until all patches have been released, applied and validated. We thank you for your patience. You can find more information from cPanel [HERE.](https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication)

  2. resolved Apr 29, 2026, 07:50 PM UTC

    All updates have been completed and security patches are now in place. cPanel and WHM access has been fully restored. We appreciate your patience while we worked to keep your services secure.