On 28 April 2026, cPanel released an urgent security update for all currently supported versions of cPanel & WHM, addressing a vulnerability related to authentication pathways within the control panel software.
What was the issue?
cPanel identified a security issue affecting all supported versions of cPanel & WHM, specifically linked to certain authentication paths within the software. Due to the elevated access control panels provide, this type of issue is treated as critical.
Which versions were affected?
The vulnerability impacts all supported versions, with patched builds released across multiple branches including 11.110, 11.118, 11.126, 11.132, 11.134, and 11.136.
Was customer data affected?
There is no evidence of data compromise. This was a preventative security update, not a breach notification.
Do I need to take action?
- Managed customers – No action required. We’ve already taken care of this for you.
- Unmanaged VPS or dedicated server customers – we recommend checking that your cPanel installation is fully up to date and running a supported version.
