Where
-Infinity
0

Dark ReadingExploit Cyber-Frenzy Threatens Millions via Critical cPanel Vulnerability

First published (updated )

BleepingComputerCritrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

First published (updated )

The RegisterFirst reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

First published (updated )

BleepingComputerCritical cPanel and WHM bug exploited as a zero-day, PoC now available

First published (updated )

The RegisterCritical cPanel, WHM flaw probs exploited as 0-day, pros say

First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

High Fidelity Check for the cPanel Authentication Bypass (CVE-2026-41940)

First published (updated )
Social
reddit

Cpanel CpanelWebPros cPanel and WHM Authentication Bypass via Login Flow

Risk 99
Severity
9.3
3 Months
First published (updated )

Cpanel CpanelPath Traversal

Risk 79
Severity
8.8
First published (updated )

Cpanel CpanelInput Validation

Risk 78
Severity
9
First published (updated )

Cpanel CpanelInfoleak

Risk 78
Severity
9
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelInfoleak

Risk 78
Severity
9
First published (updated )

Cpanel CpanelInfoleak

Risk 78
Severity
9
First published (updated )

Cpanel CpanelInput Validation

Risk 78
Severity
9
First published (updated )

Cpanel CpanelInput Validation

Risk 38
Severity
6.5
First published (updated )

Cpanel CpanelXSS

Risk 34
Severity
5.4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelInput Validation

Risk 79
Severity
8.8
First published (updated )

Cpanel CpanelInput Validation, SQL Injection

Risk 69
Severity
8.7
First published (updated )

Cpanel CpanelCRLF Injection

Risk 43
Severity
7.5
First published (updated )

Cpanel CpanelcPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI…

Risk 79
Severity
8.8
First published (updated )

Cpanel CpanelcPanel before 58.0.4 has improper session handling for shared users (SEC-139).

Risk 79
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelInput Validation

Risk 68
Severity
7.8
First published (updated )

Cpanel CpanelcPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).

Risk 32
Severity
5.5
First published (updated )

Cpanel CpanelRace Condition

Risk 52
Severity
6.8
First published (updated )

Cpanel CpanelInfoleak

Risk 22
Severity
4.3
First published (updated )

Cpanel CpanelcPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).

Risk 18
Severity
3.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Cpanel CpanelXSS

Risk 38
Severity
6.1
First published (updated )

Cpanel CpanelInfoleak

Risk 38
Severity
6.5
First published (updated )

Cpanel CpanelInput Validation

Risk 79
Severity
8.8
First published (updated )

Cpanel CpanelcPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list ar…

Risk 79
Severity
8.8
First published (updated )

Cpanel CpanelcPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are…

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203