Web hosts are scrambling to fix the bug under active attack by hackers. One company said hackers have been abusing the bug for months.

A critical vulnerability in cPanel, the web-hosting control panel used to manage an estimated millions of servers worldwide, has been exploited to breach government websites in Guam. The flaw, tracked ...

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since late February. It is ...

Somewhere on a rack in a government data center in Southeast Asia, a cPanel login screen is almost certainly still waiting for a patch that should have been applied weeks ago. That delay is exactly ...

A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in "Sorry" ransomware attacks. This week, an emergency update for WHM and cPanel was ...