BACK

WHMCS Security Vulnerability Tuesday 12th May 2026 22:30:00

A high-severity security vulnerability (CVE-2026-29204) has been identified in the WHMCS billing and automation platform. This flaw could potentially allow authenticated users to perform unauthorized actions or access services belonging to other accounts.

In the interest of protecting our customers' environments, our security team is currently reaching out to affected account holders via email. While we are attempting to apply emergency security patches where possible, some installations may require manual updates due to specific configurations. We thank you for your patience. You can find more information from WHMCS HERE.