From Martin Primeau, Director of Customer Care

Over the last couple of weeks, our teams have been working through a series of important security upgrades across our hosting infrastructure. This follows the disclosure of several vulnerabilities affecting cPanel & WHM, the platform that powers most hosting environments around the world, including ours.

The first round of updates began around 2 weeks ago, shortly after the initial CVE was disclosed, and we have continued actively monitoring and responding as the situation evolved and additional vulnerabilities were identified. I wanted to step in and speak directly about what's been happening, why it matters, and what it means for you.

Why we moved quickly

When vulnerabilities affecting hosting infrastructure are disclosed publicly, they quickly get picked up and begin being targeted very quickly. For us at WHC, waiting too long to patch systems simply is not an option.

Our infrastructure and systems teams moved fast to validate exposure, apply vendor updates, and secure affected environments as soon as fixes became available. In some cases, that meant emergency maintenance windows, service restarts, or accelerated upgrade schedules across servers and email infrastructure.

The vulnerabilities being addressed in this round include:

• CVE-2026-41940
• CVE-2026-29201
• CVE-2026-29202
• CVE-2026-29203
• CVE-2026-29205
• CVE-2026-29206
• CVE-2026-32991
• CVE-2026-32992
• CVE-2026-32993

Several of these are considered critical enough that vendors recommended urgent action. As your hosting provider, that responsibility falls on us, and you can be sure we treat it that way.

What this means for you

If you're a WHC customer, you don't need to take any action. The patches and mitigations have been applied as part of this maintenance. Your services are protected as part of the work our teams have been carrying out.

The vast majority of WHC clients are on servers we manage directly, and those have all been updated with the latest cPanel security patches as part of this maintenance.

If you're running a self-managed server, or a server where WHC doesn't have access, you'll need to apply the latest cPanel update yourself or open a ticket from your Client Area and our team will be happy to help.

You can follow live updates on our system status page at any time.

We know there was some bumpiness

If you’re a customer, you may have noticed temporary slowdowns, short interruptions with email, WHM or cPanel access, webmail, or general hosting performance during these upgrades. We understand how disruptive that can be when you're running a business, relying on email for client communication, or simply expecting your hosting to just work.

No one likes interruptions, including us. We're already looking at how to make the next round of urgent maintenance smoother, with better coordination, clearer communication, and less customer-facing impact wherever possible.

A word on why this matters

Cybersecurity is constantly evolving, and hosting providers need to evolve with it. The decisions about when and how to patch your hosting infrastructure are being made by a Canadian team, on Canadian soil, accountable to Canadian customers. We think that matters, especially in moments like this one.

We will keep investing in both the security and reliability of our platform, and in handling these situations as transparently as we can.

Thank you

The trust you place in WHC is something we never take for granted. Our teams work hard every day to protect the infrastructure our customers rely on, and while no maintenance operation is ever perfect, our goal stays the same:

Keep your services secure, stable, and protected.

Thank you for being with us.

Martin Primeau, Director of Customer Care (WHC)