CPanel & WHM — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
April 30, 2026
Last Seen
May 10, 2026

CPanel & WHM is a technology platform tracked by ThreatCluster, appearing in 2 threat clusters built from 3 intelligence report mentions.

CPanel & WHM is a technology platform tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed April 30, 2026; most recent activity May 10, 2026.

Related Threat Clusters

  • Multiple Vulnerabilities in cPanel & WHM Posed Security Risks

    On May 8, 2026, cPanel & WHM released patches for three critical vulnerabilities: CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203. CVE-2026-29201 allows arbitrary file reads due to inadequate validation in the…

    3 articles · Updated May 10, 2026
  • cPanel and WHM Critical Auth Bypass Vulnerability Patched

    A critical authentication vulnerability affecting all supported versions of cPanel and WHM was disclosed on April 28, 2026. This flaw allows attackers to gain unauthorized access to the control panel, posing significant…

    69 articles · Updated April 29, 2026

Recent Intelligence Reports

  • CVE-2026-29203 — support.cpanel.net · May 10, 2026
  • CVE-2026-29201 — support.cpanel.net · May 10, 2026
  • cPanel 0-Day Authentication Bypass Vulnerability Actively Exploited in the Wild — Cybersecuritynews · April 30, 2026

Related Entities

Zero-day Exploit CloudLinux CVE-2026-29201 CVE-2026-29202 CVE-2026-29203 CVE-2026-41940 CWE-200 - Exposure of Sensitive Information CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication T1068 - Exploitation for Privilege Escalation T1190 - Exploit Public-Facing Application CentOS

Frequently asked questions

What is CPanel & WHM?

CPanel & WHM is a technology platform tracked by ThreatCluster, appearing in 2 threat clusters built from 3 intelligence report mentions.

Is CPanel & WHM still active?

The most recent intelligence report mentioning CPanel & WHM on ThreatCluster is dated May 10, 2026. Activity was first observed April 30, 2026, giving a tracked span from then to May 10, 2026.

What is CPanel & WHM associated with?

Across ThreatCluster reporting, CPanel & WHM most frequently co-occurs with Zero-day Exploit, CloudLinux, CVE-2026-29201, CVE-2026-29202, CVE-2026-29203, among 12 tracked related entities.

What are the latest developments involving CPanel & WHM?

The most significant recent cluster is “Multiple Vulnerabilities in cPanel & WHM Posed Security Risks” (3 articles · Updated May 10, 2026). CPanel & WHM appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on CPanel & WHM?

CPanel & WHM appears in 3 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown