cPanel Security Bulletin: Fixes for Exim, Roundcube, ClamAV, and Perl CVEs

Based on the provided web page screenshot, here is a summary of the key vulnerability information: Vulnerability Overview 1. CVE-2026-94054 - Description: The PHP helper was removed in and . - Impact: Custom billing integrations will no longer be updated. 2. CVE-2026-94055 - Description: Updated the bundled Exim to version 4.100.1. - Impact: Several security vulnerabilities have been fixed. 3. CVE-2026-94057 - Description: Updated the bundled Exim to version 4.100.1. - Impact: Several security vulnerabilities have been fixed. 4. CVE-2026-20337 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 5. CVE-2026-20338 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 6. CVE-2026-20339 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 7. CVE-2026-20345 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 8. CVE-2026-20346 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 9. CVE-2026-20347 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 10. CVE-2026-20348 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 11. CVE-2026-8088 - Description: Updated to version 1.5.4. - Impact: Several security vulnerabilities have been fixed. 12. CVE-2026-15534 - Description: Updated to version 5.4.2.0-cp130. - Impact: Several security vulnerabilities have been fixed. 13. CVE-2026-74997 - Description: Updated Roundcube to version 1.6.18. - Impact: Several security vulnerabilities have been fixed. 14. CVE-2026-74998 - Description: Updated Roundcube to version 1.6.18. - Impact: Several security vulnerabilities have been fixed. 15. CVE-2026-75002 - Description: Updated Roundcube to version 1.6.18. - Impact: Several security vulnerabilities have been fixed. Affected Components cPanel/Accounting.php.inc and cPanel/Accounting-class.php.inc: Custom billing integrations will no longer be updated. Exim: Several security vulnerabilities have been fixed. cpanel-clamav: Several security vulnerabilities have been fixed. cpanel-perl-542: Several security vulnerabilities have been fixed. Roundcube: Several security vulnerabilities have been fixed. Remediation cPanel/Accounting.php.inc and cPanel/Accounting-class.php.inc: The PHP helper has been removed, and custom billing integrations will no longer be updated. Exim: Update to version 4.100.1. cpanel-clamav: Update to version 1.5.4. cpanel-perl-542: Update to version 5.4.2.0-cp130. Roundcube: Update to version 1.6.18. POC Code or Exploit Code The page does not contain specific POC code or exploit code. --- The above summary covers all key vulnerability information mentioned on the page.

Goal Reached Thanks to every supporter — we hit 100%!

cPanel Security Bulletin: Fixes for Exim, Roundcube, ClamAV, and Perl CVEs