This page may contain stale information. Last updated: 2026-05-04
Overview
cPanel and WebHost Manager (WHM) are the industry’s most popular web hosting control panel software. cPanel allows servers to be managed through a web-based interface, automating website, database, email, and other hosting management tasks.
2026 Critical Vulnerability (CVE-2026-41940)
Details
- CVSS Score: 9.8 (Critical)
- Type: Authentication bypass
- Impact: Unauthenticated remote attackers can gain full server control
- Status: Actively exploited in the wild
Impact Scale
- Millions of websites potentially affected
- Called “Bug of the year” by security researchers
- Exploitation confirmed before patches landed
Response
- Emergency patches released
- cisa added to Known Exploited Vulnerabilities catalog
- Server administrators urged to patch immediately