Hackers are actively exploiting a bug in cPanel and WHM

#1

Post by dotmanish » Thu, Apr 30, 2026, 8:43 PM UTC

Hackers are actively exploiting a bug in cPanel and WHM
techcrunch.com

Re: Hackers are actively exploiting a bug in cPanel and WHM

#2

Post by dspillett » Thu, Apr 30, 2026, 11:35 PM UTC

With this (CVE-2026-41940) and copy.fail (CVE-2026-3143), it must be an exciting time in the shared hosting business right now… Glad I've been out of it for a long time.

Re: Hackers are actively exploiting a bug in cPanel and WHM

#3

Post by sikozu » Fri, May 01, 2026, 12:14 AM UTC

There must be so many (small) shared hosting companies that don't update their software, those poor customers.

Re: Hackers are actively exploiting a bug in cPanel and WHM

#4

Post by ChrisArchitect » Fri, May 01, 2026, 1:41 AM UTC

A full breakdown of the vulnerability: https://labs.watchtowr.com/the-internet-is-falling-down-fall...

Re: Hackers are actively exploiting a bug in cPanel and WHM

#5

Post by sikozu » Fri, May 01, 2026, 2:40 AM UTC

ChrisArchitect wrote: post #4

A full breakdown of the vulnerability: https://labs.watchtowr.com/the-internet-is-falling-down-fall...

Thanks for sharing, this is a great read!

Re: Hackers are actively exploiting a bug in cPanel and WHM

#6

Post by aitchnyu » Fri, May 01, 2026, 9:16 AM UTC

Which are the safest control panels^ ? Been thinking about Hostineer which developed and dogfooded ApisCP over 20 years.

[^] a product made for commercial operators stuffing thousands of PHP sites into a server, so no Coolify, Google Cloud Run.

Re: Hackers are actively exploiting a bug in cPanel and WHM

#7

Post by jmclnx » Fri, May 01, 2026, 3:52 PM UTC

Luckily my site uses Plesk after moving away from cPanel years ago.

I have to wonder if this issue is due to never reviewing auto-test scripts ?

I know where I worked, testing is now an afterthought and half the time testing means no issues compiling and deploying :)

We had a separate testing group and they caught lots of issues. But due to Agile, they were all fired years ago.

Re: Hackers are actively exploiting a bug in cPanel and WHM

#8

Post by cestith » Fri, May 01, 2026, 6:41 PM UTC

jmclnx wrote: post #7

Luckily my site uses Plesk after moving away from cPanel years ago. I have to wonder if this issue is due to never reviewing auto-test scripts ? I know where I worked, testing is now an afterthought and half the time testing means no issues compiling and deploying :) We had a separate testing group and they caught lots of issues. But due to Agile, they were all fired years ago.

Plesk is a separate team owned by the same parent company.