Over 40,000 Servers Compromised in cPanel Exploitation Campaign
A critical vulnerability in cPanel & WebHost Manager (WHM) has led to the compromise of over 40,000 servers. The flaw, identified as CVE-2026-41940, allows unauthenticated attackers to gain administrative access, potentially compromising all configurations, databases, and websites managed by the platform. The vulnerability has been exploited since late February, with a significant increase in activity following its public disclosure. Users are urged to update to patched versions to mitigate the risk.