cPanel Patched Five More CVEs. One Fix Is Already Reported Incomplete.

The Short Version: The May 12-13 window produced two security releases from products under the WebPros umbrella. On May 12, WHMCS released versions 8.13.3 and 9.0.4 to address CVE-2026-29204, an authorization bypass affecting all earlier WHMCS 8.x and 9.x releases. On May 13 at 1:00pm EST, cPanel and WHM released patches for five additional CVEs: CVE-2026-29205, CVE-2026-29206, … Continue reading cPanel Patched Five More CVEs. One Fix Is Already Reported Incomplete.