Access to cPanel blocked
- Affects
- cPanel servers
- Start
- 28 Apr 2026, 21:02 CEST
- End
- 29 Apr 2026, 07:00 CEST
- Resolved
- 29 Apr 2026, 07:00 CEST
-
-
Due to an active authentication bypass exploit found in cPanel. We've blocked access to cPanel for the time being until cPanel has rolled out a fix. The block means the control panel will not be accessible for the time being. Websites remain available.
Update 10.38pm: The estimate is that cPanel will roll out the update during the night. We will enable access to cPanel (and webmail) again when we confirm it's indeed rolled out on servers. We expect this to be confirmed in the morning.
We do recommend people who use webmail actively to set it up in a mail-client for the time being. For cPanel this usually boils down to mail. as IMAP and SMTP host. 993 for IMAP, 465 for SSL or 587 for StartTLS for SMTP. Your username is your email and password being the password for the email.
Update 07.00am: We've confirmed the update has been rolled out to all our cPanel servers. We've opened up for the services again.