# cPanel auth bypass

**URL:** <https://taggartinstitute.org/t/cpanel-auth-bypass/607>\
**Category:** Cyber News\
**Tags:** web, vulnerability\
**Created:** [April 29, 2026, 4:04pm UTC](https://taggartinstitute.org/t/cpanel-auth-bypass/607 "2026-04-29T16:04:16Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![mttaggart](https://taggartinstitute.org/user_avatar/taggartinstitute.org/mttaggart/32/10_2.png) [@mttaggart](https://taggartinstitute.org/u/mttaggart)\
**Post date:** [April 29, 2026, 4:04pm UTC](https://taggartinstitute.org/t/cpanel-auth-bypass/607/1 "2026-04-29T16:04:16Z")

</div>

No CVE, but this is gonna burn some folks.

> **[cPanel, WHM emergency update fixes critical auth bypass bug](https://www.bleepingcomputer.com/news/security/cpanel-whm-emergency-update-fixes-critical-auth-bypass-bug/)**
>
> A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the control panel without authentication.

> **[\[RESOLVED\] CRITICAL SECURITY VULNERABILITY WITH CPANEL/WHM, APRIL 28, 2026 -...](https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026/)**
>
> Dear Customers, We regret to inform you that a critical security vulnerability has been identified in cPanel software affecting all currently supported versions. This vulnerability relates to an authentication login exploit that could allow...

[https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026](https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026)