Panel patches authentication flaw across supported versions, prompting Namecheap port blocks and temporary access limits.

Web hosts are scrambling to fix the bug under active attack by hackers. One company said hackers have been abusing the bug ...

Over 40,000 servers have likely been compromised in ongoing attacks targeted at a recently patched cPanel zero-day.

A critical-severity authentication bypass vulnerability in cPanel & WHM has been exploited as a zero-day since February 2026.

A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be ...

The authentication-bypass flaw has multiple proof-of-concept exploits, and one researcher claims there's been zero-day ...

Perhaps the worst part is that early signals from defenders, such as KnownHost CEO Daniel Pearson, suggest it may have been ...

A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in "Sorry" ...

Web hosting software vendor cPanel has issued patches for a critical vulnerability in its software that is under exploitation ...

A critical authentication bypass flaw in cPanel and WHM, CVE-2026-41940, continues to be exploited globally despite emergency patches released April 28. While compromised instances have dropped from ...