cPanel has released multiple new versions addressing critical Exim vulnerabilities.

Affected Vulnerabilities

  • CVE-2026-40684

  • CVE-2026-40685

  • CVE-2026-40686

  • CVE-2026-40687

Fixed cPanel Versions

Update to one of the following versions (based on your current tier):

  • 11.136.0.7

  • 11.134.0.23

  • 11.126.0.56

  • 11.118.0.64

  • 11.110.0.112

How to Update cPanel

Important: Replace VERSION below with the correct target version for your environment.

chattr -ia /etc/cpupdate.conf /usr/local/cpanel/version
rm -f /usr/local/cpanel/logs/license_log
touch /usr/local/cpanel/cpanel.lisc

VERSION=11.xxx.x.x
sed -i "s/^CPANEL=.*/CPANEL=$VERSION/g" /etc/cpupdate.conf

echo "$VERSION" > /usr/local/cpanel/version

/scripts/upcp --force

Example

VERSION=11.136.0.7

Verification

After the update completes, confirm the installed version:

/usr/local/cpanel/cpanel -V


Tuesday, May 5, 2026

« Back