A security flaw has been found in the popular web server management software ‘cPanel’ and WebHost Manager (WHM), which are used by millions of websites. Security researchers have issued a serious warning, saying that through this flaw, hackers can bypass the login process and gain complete control over the server.
This bug, named ‘CVE-2026-41940’, has the ability to give hackers full access to the software’s admin panel by bypassing the login screen using remote technology. Since cPanel and WHM perform sensitive tasks such as website hosting, email management, and databases, it is considered very dangerous for hackers to gain access to them.
Canada’s National Cyber Security Agency has issued an advisory stating that the potential for this vulnerability to be exploited is high. According to the agency, websites on shared servers of large web hosting companies are particularly likely to be affected by this. The agency has urged cPanel customers and web hosting companies to take immediate action.
After the security flaw was made public, the world's largest web hosting companies have started patching their customers' systems. Namecheap, a well-known name in the web hosting sector, had temporarily blocked customer access to cPanel to ensure security and apply patches. Similarly, HostGator has also stated that it has updated its system, calling it a critical issue.
Meanwhile, KnownHost CEO Daniel Pearson has claimed that there is evidence that hackers have been trying to exploit the flaw since February 23. According to him, such unauthorized access attempts were made on about 30 servers in their network.
The cPanel maker has admitted that the problem exists in all its supported versions and urged customers to update their systems immediately. The company has also reported that it has released a security update for WP Squared, a tool used to manage WordPress websites.
How did you feel after reading this article?
Related Posts
