cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel published updates to remediate three vulnerabilities in cPanel/WHM—including an arbitrary file read (CVE-2026-29201), arbitrary Perl code execution (CVE-2026-29202), and unsafe symlink handling that can cause DoS or privilege escalation (CVE-2026-29203)—and provided patched version numbers; while these new flaws have no reported in-the-wild exploitation, the advisory warns alongside a recent, separately weaponized cPanel zero-day that delivered Mirai botnet variants and the 'Sorry' ransomware, and advises customers to update immediately.