Critical cPanel zero-day auth bypass exploited since February

A critical authentication bypass vulnerability in cPanel & WHM is being actively exploited, allowing remote attackers to gain full administrative access to affected servers without credentials. The flaw, tracked as CVE-2026-41940, has received a near-maximum severity score and impacts millions of internet-facing systems. The issue was disclosed by cPanel on April 28, 2026, and assigned … The post Critical cPanel zero-day auth bypass exploited since February appeared first on CyberInsider.