cPanel/WHM - Access Temporarily Restricted

Incident Report for StableHost

Resolved

All our Web Hosting servers have been patched according to cPanel directions. If you have a VPS and you are still facing issues, please contact our support.
Posted Apr 28, 2026 - 19:14 CST

Investigating

cPanel has published a notice of a critical authentication vulnerability affecting supported versions of cPanel & WHM. As a precaution, we have temporarily restricted external access to cPanel and WHM ports 2083 and 2087 at the network edge while cPanel prepares a patch. cPanel identifies this firewall restriction as the current recommended workaround.

During this time, customers may be unable to access:
• cPanel via TCP/2083
• WHM via TCP/2087

In addition, service (proxy) subdomains may be impacted, including:
• cpanel.yourdomain.com
• whm.yourdomain.com
• webmail.yourdomain.com
• webdisk.yourdomain.com

These “proxy subdomains” are simply friendly shortcuts that redirect to your server’s login services (like cPanel or webmail) without requiring a port number. Because they ultimately rely on the same underlying access points, they may not function during this restriction.

This does not indicate an outage of hosted websites, email delivery, DNS, FTP, or database services. Those services are expected to continue operating normally.

We are monitoring cPanel’s patch release and will restore access once the vulnerability has been addressed and we have completed validation.

You may read more about this vulnerability here:
https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication

Thank you for your patience while we take this precaution to protect customer environments.
Posted Apr 28, 2026 - 14:00 CST
This incident affected: Servers (Amsterdam, NL, Frankfurt, DE, Madrid, ES, Chicago, US, St. Loius, US, San Jose, US, Phoenix, US, Singapore, SG, Stockholm, SE, Turku, FI, Vilnius, Lithuania, Reseller Servers - St. Louis, Reseller Servers - Amsterdam, VPS - Phoenix, VPS - Chicago, VPS - Amsterdam) and Corporate Website, Customer Portal, DNS Cluster, Backup Cluster, Domain Registration Services, E-Mail Cluster, Support Platform.