• Tuesday, April 28, 2026

This is a critical advisory for clients who are running cPanel on their Virtual Private Server(s).

You are recommended to update your cPanel installation as soon as possible as a vulnerability has been disclosed that can allow an attacker to exploit and authenticate to the server.

You can update by logging into your VPS via SSH or Console in the client area and running the following command:

# sudo /scripts/upcp  (You can also click on the version number in WHM and update through the web interface.)

It is recommended to perform the update using screen incase your connection gets interrupted during the update process.

A link to the advisory can be viewed here: https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication

If you run into any issues, please open a ticket with support@canhost.ca and we will get back to you as soon as possible.

Thank you,

Canhost Team