04/28/2026
cPanel has just identified a critical authentication vulnerability affecting all current versions. We've blocked the affected ports across your server. Your website is up. Your email is working. We didn't wait.
Here's what you can't access right now:
- cPanel
- WHM
- Browser-based webmail
If you're using Outlook, Apple Mail, or email on your phone - no impact.
We're watching the cPanel patch closely and will apply it the moment it's available.
More information: https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication