Latest news
Vulnerability
Three Critical cPanel and WHM Vulnerabilities Enable Code Execution, File Reads, and DoS Attacks
11 May 2026 dark6
cPanel has disclosed three critical security vulnerabilities — CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203 — affecting its widely deployed cPanel & WHM...
Vulnerability
APT Campaign Exploits cPanel CVE-2026-41940 to Breach Government and Military Servers Across South-East Asia
3 May 2026 dark6
A sophisticated threat actor has exploited the critical cPanel authentication bypass CVE-2026-41940 to compromise government and military servers across South-East...
Vulnerability
cPanelSniper PoC Exploit Released for CVSS 9.8 Flaw CVE-2026-41940 — 44,000 Servers Already Compromised
2 May 2026 dark6
A public proof-of-concept exploit framework called cPanelSniper has been released for CVE-2026-41940, a CVSS 9.8 authentication bypass in cPanel and...
Vulnerability
cPanel Emergency Patch: Critical Authentication Bypass Threatens Millions of Hosted Websites
29 April 2026 dark6
cPanel has issued emergency security patches across all supported versions to address a critical authentication vulnerability in cPanel and WHM...