Service status
Incident
Resolved

Access to cPanel blocked

Affects
cPanel servers
Start
28 Apr 2026, 21:02 CEST
End
29 Apr 2026, 07:00 CEST
Resolved
29 Apr 2026, 07:00 CEST
  1. Resolved
  2. Due to an active authentication bypass exploit found in cPanel. We've blocked access to cPanel for the time being until cPanel has rolled out a fix. The block means the control panel will not be accessible for the time being. Websites remain available.

    Update 10.38pm: The estimate is that cPanel will roll out the update during the night. We will enable access to cPanel (and webmail) again when we confirm it's indeed rolled out on servers. We expect this to be confirmed in the morning.

    We do recommend people who use webmail actively to set it up in a mail-client for the time being. For cPanel this usually boils down to mail. as IMAP and SMTP host. 993 for IMAP, 465 for SSL or 587 for StartTLS for SMTP. Your username is your email and password being the password for the email.

    https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication 

    Update 07.00am: We've confirmed the update has been rolled out to all our cPanel servers. We've opened up for the services again.

Want an email when we post about a security issue, an incident or maintenance? Choose in your settings