Skip to content

CVE-2026-41940

In 4 briefs, most recently 12 May 2026. RSS for this tag

Published 2026-04-29

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability.

Added 2026-04-30 · used in ransomware campaigns

Coverage in DanSec Daily

Tue 12 May Instructure Canvas breach by ShinyHunters, TeamPCP npm/PyPI supply chain attack, and active exploitation of cPanel CVE-2026-41940 by Mr_Rot13.
Tue 05 May Trellix source code breach, DigiCert certificate revocations after a chat-channel attack, and 40,000+ servers compromised via the cPanel flaw CVE-2026-41940.
Sun 03 May Sorry ransomware mass-exploits cPanel CVE-2026-41940; Linux root flaw CVE-2026-31431 added to KEV; Finnish teen charged over Scattered Spider.
Fri 01 May Roblox credential theft via fake game enhancements, an actively exploited cPanel zero-day, and the Mini Shai-Hulud SAP npm supply chain attack.