cPanel has released a patch for the recently identified authentication vulnerability, and we have applied it to all shared hosting servers and managed VPS environments. WHM, cPanel, and Webmail ports are now fully accessible on these systems.
Please note that these ports remain temporarily restricted on unmanaged Linux VPS servers. If your VPS is affected, a manual update may be required. You can follow the official cPanel guide here:
Direct access to cPanel (port 2083), WHM (port 2087) and webmail (port 2096) will be unavailable from public networks until the exploit has been patched.
Services and websites remain fully operational.
We will continue to monitor the situation closely and will provide updates as necessary.
We apologize for any inconvenience caused and thank you for your patience and understanding.
Posted Apr 28, 2026 - 21:15 SAST
This incident affects: Web Hosting, WordPress Hosting, VPS Hosting, and Reseller Hosting.