Stable Host incident

Security: CVE-2026-33278 cpanel-unbound 1.25.1 Security Release - May 21, 2026

Stable Host experienced a notice incident on May 22, 2026 affecting Amsterdam, NL and Frankfurt, DE and 1 more component, lasting 33d 22h. The incident has been resolved; the full update timeline is below.

Started: May 22, 2026, 12:46 AM UTC
Resolved: Jun 24, 2026, 11:40 PM UTC
Duration: 33d 22h
Detected by Pingoru: May 22, 2026, 12:46 AM UTC

Affected components

Amsterdam, NLFrankfurt, DEMadrid, ESChicago, USSt. Loius, USSan Jose, USPhoenix, USSingapore, SGStockholm, SETurku, FI

Update timeline

monitoring May 22, 2026, 12:46 AM UTC

An upstream vulnerability was recently reported for Unbound that affects supported cPanel & WHM versions 126 and higher. Impact This issue primarily affects: - Web Hosting Servers (Shared Hosting) - Managed VPS - Unmanaged VPS that might be using cPanel. At this time: • Shared hosting systems are secured. • Managed VPS systems are secured. • No customer action is currently required for shared hosting accounts or VPS managed accounts. • Unmanaged VPS customers with cPanel may need to take action to patch or mitigate affected systems. The recommended course of action is as follows (for unmanaged VPS): • Verify cPanel version • Apply vendor-provided security updates or mitigations • Contact Support if assistance is required cPanel has pushed out an update, including the updated package for the following cPanel & WHM versions: 11.126.0.63 and higher 11.134.0.30 and higher 11.136.0.14 and higher
resolved Jun 24, 2026, 11:40 PM UTC

This incident has been resolved.