[SECURITY]■ STORY TIMELINE
CPANEL ZERO-DAY ACTIVELY EXPLOITED, POC RELEASED
A critical authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild since late February. A proof-of-concept is now publicly available.
Bleeping Computer+0m
The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploit…