cPanel Issues Emergency Patch for Critical Authentication Vulnerability

Severity: High (Score: 72.8)

Sources: Cybersecuritynews, Gbhackers

Summary

cPanel has released an emergency security update to address a critical authentication vulnerability affecting its core software, specifically within the cPanel and Web Host Manager (WHM) ecosystem. The flaw, disclosed on April 28, 2026, impacts multiple authentication paths, posing a significant risk to web hosting administrators and providers. System administrators are urged to apply the patch immediately to mitigate potential exploitation. The vulnerability's details, including specific CVEs, have not been disclosed in the articles. However, the urgency of the situation indicates a high likelihood of active exploitation attempts. The scope of impact includes all users of cPanel and WHM, which are widely utilized in web hosting environments. As of today, the patch is available and should be prioritized for deployment. Key Points: • cPanel has issued an emergency patch for a critical authentication vulnerability. • The vulnerability affects multiple authentication paths within cPanel and WHM. • System administrators must apply the patch immediately to prevent exploitation.

Key Entities

• cPanel (platform)
• Web Host Manager (platform)
• CWE-287 - Improper Authentication (cwe)