Nearly 4,000 attacks have slammed cPanel and WHM instances exploiting a critical authentication bypass. The vulnerability, rated 9.8, grants attackers remote control, but some providers claim to have customers covered.
A critical zero-day vulnerability in cPanel has left over 40,000 servers exposed, granting attackers administrative access. The exploitation wave highlights a persistent threat to web hosting infrastructure.
The wheels are coming off the bus for cPanel & WHM users. A critical authentication bypass vulnerability, CVE-2026-41940, is not just theoretical; it's already in the wild.
The digital foundations of the internet are shaking. A critical flaw in cPanel/WHM, the invisible scaffolding for millions of websites, has been weaponized, granting attackers the keys to the kingdom.