Privacy & Security
CVE-2026-41940: The cPanel Zero-Day Exploited for Two Months Before Anyone Could Patch It
A CVSS 9.8 authentication bypass let attackers take over 1.5 million cPanel servers - and exploitation started 64 days before the patch existed.