Critical cPanel security vulnerability, precautionary measures

On April 28, 2026 cPanel identified and published a critical security vulnerability in the cPanel & WHM software, involving an exploit in the login authentication mechanism. The vulnerability affects all supported versions of cPanel.

The precautionary measures we took

cPanel is developing a patch to fix the issue. Until it becomes available, and following cPanel's official guidance, we immediately took the following precautionary measures on our servers:

• Disabling the cpdavd service (Web Disk)
• Stopping the cpsrvd service, which serves the WHM, cPanel and Webmail environments

What this means for you in practice

Browser access to cPanel, Webmail and WHM (i.e. for Admins and Resellers) is temporarily unavailable for everyone, even for us. It is a necessary protective measure to prevent unauthorized access to your accounts.

What is not affected

All your other services, such as your websites, sending and receiving email through an email client (Outlook, Thunderbird, mobile), as well as FTP, SSL and DNS services, work normally. Everything except web access to the server remains unaffected. The vulnerability concerns only the control panel login mechanism and does not affect the operation of hosting services.

Next steps

As soon as cPanel publishes the patch, we will apply it immediately and restore access to cPanel, WHM and Webmail, with a further update. In the meantime, we cannot make any exception by temporarily enabling the disabled web services, because cPanel's official position recommends disabling them immediately until the problem is fixed.

To follow when the patch is published, and for more information about the vulnerability, see cPanel's official announcement.

What happened next, with the patch and the checks that followed, is described in the article Security incidents in cPanel (CVE-2026-41940) and CloudLinux (CVE-2026-31431).

For any question or need, our team is at your disposal.