NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Critical cPanel Authentication Vulnerability Identified — Update Your Server Imm

BACKGROUND
2 SIGNALSFIRST DETECTED 29 April 2026
Narrative synthesis pending — 2 signals collected.
How the story developed
Other feeds and industry voices
9 May
cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager (WHM) that could be exploited to achieve privilege escalation, code execution, and

REPORT · HOW · The Hacker NewsOPEN STORY
9 Sept
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create

REPORT · WHO · The Hacker NewsOPEN STORY
30 Apr
Critical cPanel and WHM bug exploited as a zero-day, PoC now available

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since

REPORT · WHAT · BleepingComputerOPEN STORY
29 Apr
cPanel, WHM emergency update fixes critical auth bypass bug

A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the control panel without

REPORT · WHAT · BleepingComputerOPEN STORY
11 May
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

A threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised

REPORT · WHAT · The Hacker NewsOPEN STORY
1 May
Actively exploited cPanel bug exposes millions of websites to takeover

A vulnerability in the cPanel/WHM admin interface lets attackers access websites without a username and password.

REPORT · WHAT · Malwarebytes LabsOPEN STORY
15 Sept
Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the

REPORT · WHAT · BleepingComputerOPEN STORY
4 May
Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks

A previously unknown threat actor has been observed targeting government and military entities in Southeast Asia, alongside a smaller cluster of managed service providers (MSPs)

REPORT · WHAT · The Hacker NewsOPEN STORY
Sources
The Hacker News×2

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →