CPanel and WHM Critical Authentication Bypass Security Advisory

Security advisories have identified a critical authentication bypass vulnerability, tracked as CVE-2026-41940, which impacts all supported versions of cPanel and WHM. This flaw allows unauthenticated attackers to gain administrative control over web hosting environments, potentially leading to full system compromise and the installation of malware. Evidence suggests that malicious actors began actively exploiting this weakness as early as February 2026. In response, major hosting providers like Namecheap temporarily blocked access to management ports while applying emergency security patches. Server administrators are urged to immediately force an update to their software and verify the installation of secure versions to protect their data.

Видео CPanel and WHM Critical Authentication Bypass Security Advisory канала Juan Romero - SOCFortress Cofounder