✅ cPanel released a patch for CVE-2026-29203
-
Friday, 8th May, 2026
-
21:18pm
✅ cPanel released a patch for CVE-2026-29203
CVE-2026-29203 : An unsafe symlink handling error was found that allows a user to chmod an arbitrary file, allowing for denial of service and possible privilege escalation.
details : https://support.cpanel.net/hc/en-us/articles/40311543760407-Security-CVE-2026-29203-cPanel-WHM-WP2-Security-Update-May-08-2026
Patch applied to this versions :
11.136.0.9
11.134.0.25
11.132.0.31
11.130.0.22
11.126.0.58
11.124.0.37
11.118.0.66
11.110.0.117
11.102.0.41
11.94.0.30
11.86.0.43
To update your cPanel :
CLPCP ; /scripts/upcp --force