Miasma npm worm armed 42 GitHub repositories, JFrog says
Oversized blobs hid credential theft and a token-revocation wiper on real developer accounts, not only test repos.
74
- Mentions · 7d1
- Mentions · 30d1
- All mentions11
- First seenSep 9, 2026
- Last mentioned6d ago
Timeline
11 articles · newest firstMultiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server
cPanel patched a root command-execution flaw and two stored XSS bugs in WHM.
68
WebPros security advisory (AV26-961)
Canada's Cyber Centre urges patches for root code-execution flaws in Plesk, cPanel, and WebPros extensions.
68
cPanel Permissions Flaw Allows Local Users to Read Other Accounts’ Calendar Data
cPanel patched CVE-2026-68490, which lets local users on shared servers read other accounts' calendars and contacts.
44
New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts
cPanel patched a root privilege escalation and cross-tenant flaws in calendars, contacts, and WordPress databases.
64
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
cPanel patched three flaws, including a root code-execution bug any hosting account can use to seize the server.
73
Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware
Attackers are exploiting CVE-2026-41940, a critical unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and recruit them into Mirai botnets.
80
Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers
Attackers exploited critical cPanel CVE-2026-41940 on hosting servers, deploying Mirai variants and ransomware.
85
cPanel ConfigServer Security & Firewall Vulnerability Allows Remote Attacker to Execute Arbitrary Commands
CSF 14.00–16.29 (CVE-2026-65638) lets unauthenticated attackers execute arbitrary commands via the MESSENGER service on cPanel/WHM servers; version 16.30 fixes it.
55
cPanel Urges Users to Patch ConfigServer Firewall Remote Code Execution Flaw
cPanel urges administrators to patch CVE-2026-65638, a flaw letting unauthenticated attackers run commands through ConfigServer Firewall's MESSENGER service; update to CSF 16.30.
55
New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server
cPanel disclosed critical SQL injection CVE-2026-67401 in EmailTrack, letting authenticated users with mail privileges gain root code execution; patched builds available.
50
Related CVEs
by mentions- CVE-2026-4194099%9.3Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
- Authenticated Privilege Escalation to Root RCE in cPanel & WHM
- Argument Injection in WP Toolkit for cPanel Allows Cross-Account File Read and RCE
- Unauthenticated shell command injection in ConfigServer Security & Firewall (CSF)
- CalDAV/CardDAV Permission Flaw in cPanel Lets Local Users Read Other Accounts' Data
- CVE-2026-67401<1%9.9Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
- Authenticated OS Command Injection in Plesk Yields Root Code Execution
- Stored XSS in WHM Mass Modify Accounts
- CVE-2026-65643<1%8.7Authenticated eval injection in cPanel enables root code execution
- Authenticated Root Code Execution via Untrusted Search Path in Plesk RESTful API
Appears with
- cPanelvendor · 10
- cPanelproduct · 10
- cPanelorganization · 6
- WP Squaredproduct · 4
- ConfigServer Security & Firewallproduct · 3
- WP Toolkitproduct · 3
- WebProsvendor · 2
- JPCERT/CCorganization · 2
- Miraimalware · 2
- Pleskproduct · 2
- LiteSpeed Enterpriseproduct · 1
- Censysorganization · 1
- WebProsorganization · 1
- Plesk RESTful APIproduct · 1
- Miasmamalware · 1
- JFrogorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.