Vendor reports: major outageResolved · vendor status “resolved”Official status API

Critical Authentication Vulnerability on cPanel/WHM

Reported by Liquid Web · Hosting, CDN & Edge · source last read 2 min ago

Official source (opens in a new tab)
Vendor start
Apr 28, 2026, 21:57 UTC
Vendor's clock
Resolved
Jul 23, 2026, 19:52 UTC
Vendor's clock
First seen by Statuswall
Before tracking began
Statuswall's clock
Duration
85 d 21 h
From vendor start and resolution

Summary

Built from the facts below, no AI

Potential impact, not a confirmed outage of your systems.

What the vendor confirmed

  • Liquid Web reports major outage: "Critical Authentication Vulnerability on cPanel/WHM".[E1, E2]
  • The vendor marked it resolved at 2026-07-23 19:52 UTC.[E3, E7]

Affected products and regions

  • Components: CPanel.[E6]

What is unknown

  • Which regions are affected: the vendor did not say.[E5]
  • Whether your own systems are affected: a vendor report cannot tell you; check your monitoring.

Last update in these facts: 2026-07-23 19:52 UTC · summary s1, evidence 6082cc4614bc659e

Evidence (7)
  1. E1Liquid Web reports major outage. (vendor) source (opens in a new tab)
  2. E2Vendor title: "Critical Authentication Vulnerability on cPanel/WHM". (vendor) source (opens in a new tab)
  3. E3Vendor status word: "resolved". (vendor) source (opens in a new tab)
  4. E4Vendor-reported start: 2026-04-28 21:57 UTC. (vendor) source (opens in a new tab)
  5. E5The vendor did not state which regions are affected. (Statuswall)
  6. E6Components the vendor attached: CPanel. (vendor) source (opens in a new tab)
  7. E7Vendor-reported resolution: 2026-07-23 19:52 UTC. (vendor) source (opens in a new tab)

Affected scope

Not stated by the vendor

Components: CPanel

No region Statuswall recognises is stated for this incident (place names and provider-specific codes are not converted). It is not assumed to be global.

Potential relevance

Liquid Web is not in your stack. Follow it to see whether reports like this fall inside the regions you use.

Timeline

Vendor times come from the vendor. “Seen by Statuswall” times are when Statuswall noticed a change, which can lag the vendor by a few minutes. Statuswall does not store the vendor's update text; read it on the official page.

  1. Apr 28, 2026, 21:57 UTCVendor-reported startVendor time
  2. Jul 23, 2026, 19:52 UTCVendor-reported resolutionVendor time

No changes observed yet. Statuswall began recording changes on incidents in November 2026.