sign in--:--:--UTC

CVE-2026-41940

exploited in the wild

CVSS

9.8

Reports

5

First seen

Apr 30

Last seen

May 23

Affected product

cPanel

Associated actors

AccountDumpling (Vietnam-based) ×1 ShinyHunters ×1 Storm-1175 ×1

Recent reports

LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited for Privilege Escalation

The Hacker NewsMay 23 Critical

April 2026 CVE Landscape: 37 High-Impact Vulnerabilities, 31 Actively Exploited

Recorded Future InsiktMay 15 High

Risky Business #836: Patching alone insufficient amid AI-accelerated vulnerability discovery

Risky BusinessMay 6 High

Threat Intelligence Report – 4 May: Medtronic, Vimeo, Robinhood Breaches; AI Threats; Critical CVE Patches

Check Point ResearchMay 4 High

Vulnerability in cPanel & WHM / WP2 (CVE-2026-41940)

GovCERT.HKApr 30

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans