High 2026-07-08

Security Advisory: cPanel cpsrvd SSL Downgrade Vulnerability

cPanel AlmaLinux 8 AlmaLinux 9 CentOS 7 CloudLinux 8 CloudLinux 9

cpsrvd accepted TLS handshakes that permit protocol downgrade, exposing the Webmail and WHM login sessions to man-in-the-middle interception on affected builds.

Affected Versions

cPanel & WHM 120.0.8 and earlier

Patched Version

cPanel & WHM 120.0.12

Default Update CMD

yum update -y

Fix Commands

AlmaLinux 9 / CloudLinux 9

dnf clean metadata
/scripts/upcp --force

AlmaLinux 8 / CloudLinux 8

dnf clean metadata
/scripts/upcp --force

CentOS 7 / CloudLinux 7

yum clean all
/scripts/upcp --force

More Information

Security Advisories

Latest Advisories

Security Advisory: cPanel / CSF Plugin

2026-08-06

Security Advisory: cPanel Email Filters RCE

2026-08-06

Security Advisory: CloudLinux $HTTP_HOST Environment Injection

2026-08-06

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System