sign in--:--:--UTC

CVE-2026-41940

exploited in the wild☆ pin

CVSS

9.8

Reports

6

First seen

Apr 30, 2026

Last seen

Jul 23, 2026

Affected product

cPanel

Associated actors

AccountDumpling (Vietnam-based) ×1 Medusa ×1 ShinyHunters ×1 Water Curse ×1

Recent reports

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

The Hacker NewsJul 23, 2026 Critical

LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited for Privilege Escalation

The Hacker NewsMay 23, 2026 Critical

April 2026 CVE Landscape: 37 High-Impact Vulnerabilities, 31 Actively Exploited

Recorded Future InsiktMay 15, 2026 High

Risky Business #836: Patching alone insufficient amid AI-accelerated vulnerability discovery

Risky BusinessMay 6, 2026 High

Threat Intelligence Report – 4 May: Medtronic, Vimeo, Robinhood Breaches; AI Threats; Critical CVE Patches

Check Point ResearchMay 4, 2026 High

Vulnerability in cPanel & WHM / WP2 (CVE-2026-41940)

GovCERT.HKApr 30, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans