CVE-2026-29205 and cpdavd

  • Thursday, 14th May, 2026
  • 10:49am

Yesterday's cPanel update wasn't enough, apparently cpdavd which provides the contacts and calendar services in cPanel hosting is still exploitable, and it's only a matter of time before someone finds it, so we're closing ports 2079 and 2080 for now on the advice of cPanel, apologies for the inconvenience.

What a fun couple of weeks this has been in the webhosting world.

« Back