cPanel Domain Parking Vulnerability (CVE-2026-65643)

Share
cPanel Domain Parking Vulnerability (CVE-2026-65643)
‼️
Impact: cPanel accounts on Domain of One's Own, Managed Hosting, and Shared Hosting

[ 27 August 2026 at 5:30pmET/2130UTC ] We are writing to inform you of a vulnerability affecting the third party cPanel/WHM package used on some of our hosting servers. As a precaution, we have temporarily disabled the ability to create new subdomains, addon domains, and parked domains on affected servers while we work toward a resolution.

What happened?

  • A vulnerability was identified in the cPanel/WHM package used by our hosting infrastructure.
  • As a precautionary security measure, we have temporarily disabled the creation of new subdomains, addon domains, and parked domains on affected servers.
  • This restriction only affects the creation of new domains. Existing subdomains, addon domains, and parked domains are not impacted and will continue to function normally.

Current Status

  • The ability to add new subdomains, addon domains, and parked domains to an existing cPanel account has been disabled on affected servers as a temporary patch.
  • Our Infrastructure team is actively working on a resolution and monitoring the situation.

Next Steps

  • We intend for this restriction to be temporary and are working to restore the affected functionality as soon as it is safe to do so.
  • We will provide additional information and next steps as soon as we have more details.
  • No action is required for existing subdomains, addon domains, or parked domains.

Contact our Support Team

If you have any further questions or need assistance, please contact our support team.

Read more