Security Advisory: Immediate cPanel Update Recommended for VPS & Dedicated Servers

Update timeline

1. monitoring Apr 29, 2026, 06:37 AM UTC

   Dear Customers, A critical security vulnerability affecting cPanel & WHM login authentication has recently been identified by the vendor. This issue impacts all currently supported versions of cPanel and may expose servers to unauthorized access if left unpatched. The good news is that cPanel has now released the official security patch for supported versions. We strongly recommend that all customers using VPS and Dedicated Servers; update to the latest cPanel version at the earliest to avoid any potential impact from this vulnerability. Action Required Please update cPanel to the latest version via WHM or from the server using the standard update process. For guidance, please refer to the official documentation: https://docs.cpanel.net/whm/cpanel/upgrade-to-latest-version/ Important Notes No known service impact has been reported at this time. Servers with auto-updates enabled may already receive the patch automatically. Customers running older / unsupported cPanel versions are strongly advised to upgrade to a supported build immediately, as the vulnerability may also affect those versions. We recommend applying this update as soon as possible as a precautionary security measure.

2. monitoring May 01, 2026, 01:04 PM UTC

   Dear Customers, As part of ongoing security measures, we have temporarily blocked access to cPanel, WHM, and Webmail ports on servers where the required cPanel patch has not yet been applied. We strongly request all users to update their cPanel versions on priority to restore normal access. In the meantime, you can continue accessing your panels using service subdomains, for example: whm.domainname cpanel.domainname webmail.domainname We appreciate your cooperation in helping maintain a secure environment.

3. monitoring May 03, 2026, 01:00 PM UTC

   We understand the criticality of your services and the impact this situation may be causing. As communicated earlier, this incident is related to a recently identified security vulnerability in cPanel & WHM login. Our teams are actively working to assess and restore affected servers. Given the nature of this vulnerability, the process is complex, and our immediate priority is to secure data and prevent further impact, which is why certain access (Server/WHM/cPanel) has been temporarily restricted. Please rest assured that this is being handled with the highest priority, and we will share further updates as progress is made. We appreciate your understanding and support during this time.