A serious security vulnerability in cPanel is raising alarm across the web hosting industry, with attackers potentially able to bypass authentication and gain unauthorized access to control panel systems.
In an alert issued Tuesday, cPanel confirmed the flaw affects all currently supported versions, urging administrators to update immediately. The company has already pushed patches in the following releases:
- 11.110.0.97
- 11.118.0.63
- 11.126.0.54
- 11.132.0.29
- 11.136.0.5
- 11.134.0.20
“If your server is not running a supported version of cPanel that is eligible for this update, it is highly recommended that you update as soon as possible,” the company warned, noting that older systems may also be at risk.
While cPanel has withheld technical specifics about the vulnerability, hosting provider Namecheap revealed it involves a critical authentication bypass exploit that could allow attackers to seize control of affected systems.
In response, Namecheap along with other hosting companies has taken emergency measures, deploying firewall rules to block access to TCP ports 2083 and 2087—effectively locking down cPanel and WHM interfaces. The move is temporary but necessary, restricting user access until full patching is completed.
“Our team is actively monitoring the situation and will apply the official patch across all supported servers as soon as it becomes available,” Namecheap stated. “Access will be restored immediately once deployment is complete.”
As of April 29, 2026 (02:42 a.m. UTC), Namecheap confirmed that patches have already been rolled out across Reseller and Stellar Business servers, with broader deployment underway.
Bottom line: This is a high-risk vulnerability with real potential for exploitation. Server administrators are strongly advised to update immediately or risk exposure.