cPanel Warns of Critical Authentication Flaw – Emergency Patch Released

cPanel issued an emergency security advisory for a critical authentication vulnerability affecting all supported cPanel/WHM versions; administrators are urged to apply provided patches (listed secure builds) immediately or run `/scripts/upcp --force`. The flaw could allow attackers to bypass logins and gain root-level control of hosting servers, risking site defacement, ransomware, data exfiltration, and botnet enlistment; the advisory also warns unsupported/EOL installs will not receive fixes and recommends MFA, IP allowlisting, and firewall mitigations.