cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

What’s new: cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager (WHM) that could lead to privilege escalation, code execution, and denial-of-service. The vulnerabilities are identified as follows: CVE-2026-29201 (CVSS score: 4.3), CVE-2026-29202 (CVSS score: 8.8), and CVE-2026-29203 (CVSS score: 8.8).

Who’s affected

Users of cPanel and WHM versions below the following are affected: 11.136.0.9, 11.134.0.25, 11.132.0.31, 11.130.0.22, 11.126.0.58, 11.124.0.37, 11.118.0.66, 11.110.0.116, 11.110.0.117, 11.102.0.41, 11.94.0.30, 11.86.0.43, and WP Squared 11.136.1.10 and lower. Additionally, cPanel has released version 110.0.114 for users on CentOS 6 or CloudLinux 6.

What to do

• Update to the latest versions of cPanel and WHM to mitigate the vulnerabilities.

Sources

• The Hacker News