:
[SECURITY]■ STORY TIMELINE

CPANEL ZERO-DAY ACTIVELY EXPLOITED, POC RELEASED

A critical authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild since late February. A proof-of-concept is now publicly available.

1 SOURCEFIRST SEEN APR 30, 11:40 AM► READ THE ARTICLE
Bleeping Computer+0m

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploit…