cPanel/WHM services closed
- Affects
- cPanel/WHM services
- Start
- 8 May 2026, 08:52 CEST
- End
- 8 May 2026, 21:38 CEST
- Resolved
- 8 May 2026, 21:38 CEST
-
-
Due to newly disclosed vulnerabilities in cPanel/WHM (CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203), we are temporarily restricting access to all cPanel-related services. This measure is being taken proactively to protect customer environments until official patches have been released and verified.
What remains operational
All core services continue to function as normal:- Websites
- Email (IMAP/SMTP)
- FTP
- SSH
- All Grid Hosting plans
Webmail users
Customers who typically access email via webmail are advised to temporarily configure their email accounts in a local email client (e.g., Outlook, Apple Mail, Thunderbird).Email configuration details
You can use the following settings to access your email:- Incoming mail server (IMAP):
mail.yourdomain.com - Outgoing mail server (SMTP):
mail.yourdomain.com
Example: For
myawesomewebsite.com, usemail.myawesomewebsite.com- IMAP port: 993 (SSL/TLS)
- SMTP port: 465 (SSL/TLS) or 587 (STARTTLS)
- Username: Your full email address
- Password: The password associated with your email account
These credentials are identical to those used for webmail login.
Important notice
We do not make exceptions during security lockdowns. Access to cPanel services will be restored as soon as patches are available and systems are secured.
Updates
- 10:17 AM: CVE identifiers added
- 1:43 PM: Email configuration details added
- 6.14 PM: cPanel released the software update a couple of minutes ago. We're applying the updates, which will take a bit of time. After that, we will re-enable cPanel and webmail interfaces.
- 9.38 PM: We've re-enabled the webmail and cPanel interface. The case is hereby closed.