sign in--:--:--UTC

CVE-2026-41940

exploited in the wild☆ pin

CVSS

9.8

Reports

8

First seen

Apr 30, 2026

Last seen

Sep 18, 2026

Affected product

cPanel

Associated actors

AccountDumpling (Vietnam-based) ×1 Medusa ×1 ShinyHunters ×1 Water Curse ×1

Recent reports

TSUBAME Report Overflow (Apr-Jun 2026): Mirai-like Packets and cPanel Vulnerability Exploitation

JPCERT/CC BlogSep 18, 2026 Critical

Critical cPanel Flaw Allows Authenticated Users to Gain Root Control of Hosting Server

The Hacker NewsAug 28, 2026 High

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

The Hacker NewsJul 23, 2026 Critical

LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited for Privilege Escalation

The Hacker NewsMay 23, 2026 Critical

April 2026 CVE Landscape: 37 High-Impact Vulnerabilities, 31 Actively Exploited

Recorded Future InsiktMay 15, 2026 High

Risky Business #836: Patching alone insufficient amid AI-accelerated vulnerability discovery

Risky BusinessMay 6, 2026 High

Threat Intelligence Report – 4 May: Medtronic, Vimeo, Robinhood Breaches; AI Threats; Critical CVE Patches

Check Point ResearchMay 4, 2026 High

Vulnerability in cPanel & WHM / WP2 (CVE-2026-41940)

GovCERT.HKApr 30, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans