Important Security Advisory – cPanel & WHM

Resolved
Resolved

We've now resolved the incident. Thanks for your patience. cPanel have released patches for the 3 CVEs and we have successfully applied them to our servers.

If you have a unmanaged cPanel VPS, we highly recommend you update your cPanel installations immediately, as we have removed our firewall blocks to restore service to our servers.

If you have any questions, please contact our support team.

Identified

Important Security Advisory – cPanel & WHM

We would like to make customers aware of a newly disclosed security advisory affecting cPanel & WHM.

cPanel has notified hosting providers of three security vulnerabilities currently being addressed by their security engineering team:

  • CVE-2026-29201
  • CVE-2026-29202
  • CVE-2026-29203

At the time of writing, technical details have not yet been publicly disclosed, with security patches scheduled for release by cPanel shortly.

Our Response

As part of our proactive security process, our engineering team is already preparing for immediate deployment of the vendor patches across all affected managed cPanel infrastructure as soon as updates become available.

This includes:

✅ Reviewing all managed cPanel servers for affected versions ✅ Preparing immediate patch deployment ✅ Monitoring systems for abnormal or suspicious activity ✅ Performing post-update validation checks

Customer Impact

At this stage:

  • No action is required from customers
  • All services remain operational
  • There is currently no indication of compromise within our managed environment

As an additional precaution, we have temporarily restricted access to cPanel, WHM, and Webmail services for up to 72 hours while we continue to monitor for any potential issues that may not yet have been identified.

If any brief maintenance windows or service restarts are required as part of the update process, affected customers will be notified accordingly.

Security remains a top priority, and we will provide a further update once patch deployment has been completed.

If you have any questions, please contact our support team.

Began at:

Affected components
  • Cloud Hosting
    • Windows Hosting
    • cPanel Hosting
  • Cloud Servers
  • SSD VPS Hosting
  • Dedicated Servers