[KRİTİK] Security Advisory: cPanel

Full info : https://support.cpanel.net/hc/en-us/articles/42285884685207-Security-GCVE-25-2026-07-45-3-Exim-forward-Privilege-Escalation

A local user's .forward file can trigger unsafe string expansion in Exim's redirect router, allowing command injection under certain pipe transport configurations.

Exim Affected Versions : Below 4.99.5

✅ Patched Versions :

11.110.0.137
11.126.0.78
11.134.0.48
11.136.0.32
138.1.6 ( WP2 )

To update your cPanel : 

Shell

LPCP; /scripts/upcp --force

To update your WP2 : 

Shell

LPCP; /scripts/upcp --force