Access restricted to cPanel, WHM & Webmail

Update timeline

1. identified Apr 28, 2026, 09:08 PM UTC

   Status: Identified We're currently applying precautionary restrictions to cPanel, WHM, and Webmail access following this recently disclosed security vulnerability affecting cPanel - https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication There is no indication of any compromise to Krystal systems or customer data. This is a proactive step to remove any exposure while we await patches from cPanel. All customer websites, email delivery, and core hosting services remain fully operational. The changes are limited to cPanel and Webmail access only. Our team is closely monitoring the situation. We will restore normal access as soon as we have received confirmation from cPanel. We appreciate your understanding. As always, if you have any questions, our team is here to help. Affected components Shared Hosting (Partial outage) Business Hosting (Partial outage) Virtual Private Servers (Katapult) (Partial outage) Reseller Hosting (Partial outage)

2. identified Apr 28, 2026, 10:11 PM UTC

   Status: Identified https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication cPanel have released a patch, which we are in the process of deploying. Thank you for your patience. Affected components Business Hosting (Partial outage) Virtual Private Servers (Katapult) (Partial outage) Reseller Hosting (Partial outage) Shared Hosting (Partial outage)

3. monitoring Apr 28, 2026, 11:26 PM UTC

   Status: Monitoring The cPanel patch has been deployed across the server fleet. cPanel, WHM and Webmail access will now be available for all patched servers. We are monitoring for any further impact. If you have any questions or experience relevant issues, please contact our Support team. Affected components Shared Hosting (Operational) Business Hosting (Operational) Virtual Private Servers (Katapult) (Operational) Reseller Hosting (Operational)

4. resolved Apr 29, 2026, 09:20 AM UTC

   Status: Resolved All servers have been patched, with full access restored and no further impact has been observed. Please do contact our Support team via the usual channels if you experience any issues at all. Affected components Reseller Hosting (Operational) Shared Hosting (Operational) Business Hosting (Operational) Virtual Private Servers (Katapult) (Operational)