Archive — US — techcrunch
Hackers are actively exploiting a bug in cPanel, used by millions of websites
Security researchers have identified a vulnerability in cPanel and WHM, affecting millions of websites. The bug allows hackers to bypass authentication and gain full control of servers. Many hosting companies are urging customers to implement patches. Exploitation is probable, with early evidence of abuse dating back to February 2023, prompting web hosts to block access temporarily.
Key points
- Vulnerability identified in cPanel and WHM (CVE-2026-41940) allows hackers to bypass login and control servers.
- cPanel and WHM are used by millions, making exploitation potentially impactful on numerous websites.
- Web hosting companies like Namecheap and HostGator have already patched their systems and are advising customers to update.
- Canada’s cybersecurity agency warns of high probability of exploitation, urging immediate action from users.
- KnownHost reported attempts to exploit the vulnerability dating back to February 23, with signs of unauthorized access.
Why it matters
- In 2025, IT trends highlight ongoing vulnerabilities in widely-used software as a major security concern.
- The increase in cyber threats is reflected in the focus on patch management and proactive cybersecurity measures.
- Previous incidents of software vulnerabilities causing widespread issues could motivate stronger security regulations in the industry.
The discovery of this vulnerability underlines the critical need for timely software updates and robust cybersecurity practices among web hosting providers and their customers.