cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Reports indicate that attackers are exploiting this critical cPanel flaw. Apply the available patches immediately.

Reports indicate that attackers are exploiting this critical cPanel flaw to deploy a Go-based ransomware known as Sorry. Apply the available patches immediately.

An authentication bypass vulnerability affecting cPanel, WHM and WP Squared has reportedly been exploited in the wild as a zero-day. Patches should be applied immediately.

Exploitation of this cPanel vulnerability has been reported. Immediate patching is recommended to protect from this threat, which impacts all supported versions.

Detections

Analytics

CVE-2026-41940

critical

Vulnerable Software