Critical cPanel/WHM Vulnerability: Authentication Bypass Enables Server Takeover

Colleagues, a critical vulnerability in cPanel and WHM (CVE-2026-41940) has been discovered that allows authentication bypass and full server compromise.

What to know:
1) Remote authentication bypass granting admin-panel access.
2) Affects all supported versions; Namecheap and HostGator have implemented blocks and patches.
3) The Canadian authority deems exploitation “likely”; attempts detected since February.
4) Immediately verify patch status with your provider or apply updates.

Why it matters: vulnerable shared hosts can enable mass site and data compromise.

Have you checked your cPanel/WHM instances and confirmed patching with your host?

#Cybersecurity #WebHosting #cPanel #InfoSec