Security: SEC-73755 cPanel & WHM / WP2 Security Update – May 19, 2026

Situation

A vulnerability has been reported that currently affects cPanel & WHM versions 132 and higher.

Impact

We have pushed out a patch for the following cPanel & WHM versions: 

• 11.132.0.35 and higher
• 11.134.0.29 and higher
• 11.136.0.13 and higher

We have pushed out a patch for the following WP Squared version:

• 11.136.1.16 and higher

Note: All further versions of cPanel are patched for this issue as well. Please see the latest changelogs for version information of each cPanel branch:
https://docs.cpanel.net/changelogs/

Call to Action

1. Update the cPanel version on the server to one of the versions listed above. This can be done with the following:

   # /scripts/upcp –force

2. Once completed, verify the cPanel version with the following to ensure the update was successful.

   # /usr/local/cpanel/cpanel -V

3. If you are not able to update, then it is recommended that you block inbound traffic on ports 2079 and 2080 at the firewall until you are able to proceed with the upgrade.

Additional Information

Security: SEC-73728 cPanel & WHM / WP2 Security Update – May 19, 2026

sudo /scripts/upcp --force