Hosted on MSN

CPanel’s CVE-2026-41940 is now being weaponized by a state-backed threat actor targeting government networks in Southeast Asia and North America

A high-severity vulnerability in cPanel, the control panel software that underpins web hosting for millions of servers globally, is now being exploited in active attacks. CVE-2026-41940 was publicly ...
Bleeping Computer

Critical cPanel and WHM bug exploited as a zero-day, PoC now available

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since late February. It is ...
Bleeping Computer

Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in "Sorry" ransomware attacks. This week, an emergency update for WHM and cPanel was ...
Dark Reading

Exploit Cyber-Frenzy Threatens Millions via Critical cPanel Vulnerability

A critical authentication bypass flaw in cPanel software products has come under heavy exploitation from a variety of threat actors shortly after public disclosure, putting millions of websites at ...