Miasma npm worm armed 42 GitHub repositories, JFrog says
Oversized blobs hid credential theft and a token-revocation wiper on real developer accounts, not only test repos.
74
Vendor
cPanel
- Mentions · 7d1
- Mentions · 30d6
- All mentions24
- First seenAug 28, 2026
- Last mentioned4d ago
Timeline
24 articles · newest firstINC and Gentlemen affiliates used AI agents in ransomware intrusions
Exposed logs show 8,257 messages across 133 sessions and an estimated 62 targets, four of which appeared on leak sites.
78
Ransomware affiliates using Claude left chats and tools exposed
SOCRadar found 46 INC encryptor builds, notes on 62 organizations, and more than $23,920 in recorded AI spend.
78
Cpanel::JSON::XS before 4.80 has 15 Perl JSON flaws
The notice describes decoded-key leakage, stack exhaustion under allow_tags, and missed duplicate non-ASCII bare keys.
42
Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server
cPanel patched a root command-execution flaw and two stored XSS bugs in WHM.
68
Multiple cPanel & WHM Vulnerabilities Enable Root Code Execution and Admin Session Hijacking
cPanel patched a critical root command-execution flaw and two WHM stored XSS bugs across supported versions.
66
cPanel Permissions Flaw Allows Local Users to Read Other Accounts’ Calendar Data
cPanel patched CVE-2026-68490, which lets local users on shared servers read other accounts' calendars and contacts.
44
New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts
cPanel patched a root privilege escalation and cross-tenant flaws in calendars, contacts, and WordPress databases.
64
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
cPanel patched three flaws, including a root code-execution bug any hosting account can use to seize the server.
73
Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware
Attackers are exploiting CVE-2026-41940, a critical unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and recruit them into Mirai botnets.
80
Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers
Attackers exploited critical cPanel CVE-2026-41940 on hosting servers, deploying Mirai variants and ransomware.
85
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Acronis warns CVE-2026-87886, a local privilege escalation flaw in its cPanel/WHM and Plesk backup plugins, is exploited in targeted attacks.
65
Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges
Acronis patched CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its cPanel & WHM backup plugin already exploited in targeted attacks.
62
Acronis Patches Exploited Vulnerability in cPanel Backup Plugin
Acronis urgently patched CVE-2026-87886 (CVSS 7.8), insecure file permissions enabling privilege escalation, exploited in targeted attacks on cPanel & WHM backups.
72
Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)
Acronis warns CVE-2026-87886, an authenticated Linux privilege escalation flaw in its cPanel, WHM, and Plesk backup plugins, is under limited targeted exploitation; patches released.
72
Acronis Plugin Vulnerability in cPanel and Plesk Exploited in the Wild
Acronis patched CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its cPanel and Plesk backup plugins, exploited in targeted attacks.
65
cPanel ConfigServer Security & Firewall Vulnerability Allows Remote Attacker to Execute Arbitrary Commands
CSF 14.00–16.29 (CVE-2026-65638) lets unauthenticated attackers execute arbitrary commands via the MESSENGER service on cPanel/WHM servers; version 16.30 fixes it.
55
cPanel Urges Users to Patch ConfigServer Firewall Remote Code Execution Flaw
cPanel urges administrators to patch CVE-2026-65638, a flaw letting unauthenticated attackers run commands through ConfigServer Firewall's MESSENGER service; update to CSF 16.30.
55
WebPros security advisory (AV26-908)
Canada's Cyber Centre relays WebPros advisories for SQL injection (CVE-2026-67401) in cPanel and two ConfigServer Firewall flaws.
38
New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server
cPanel disclosed critical SQL injection CVE-2026-67401 in EmailTrack, letting authenticated users with mail privileges gain root code execution; patched builds available.
50
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
cPanel patched CVE-2026-67401, an SQL injection in EmailTrack letting an account with mail privileges run code as root on the server.
56
cPanel EmailTrack SQL Injection Flaw Lets Attackers Execute Code as Root
cPanel disclosed CVE-2026-67401, an authenticated SQL injection in EmailTrack that lets attackers write files and execute code as root.
52
WebPros security advisory (AV26-861)
Canada's Cyber Centre relayed a cPanel advisory for CVE-2026-65643, a domain parking vulnerability fixed in multiple cPanel/WHM releases; admins should update.
30
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel patched critical flaw CVE-2026-65643 letting authenticated hosting customers with addon or parked domain rights execute code as root and fully compromise servers.
68
Related CVEs
by mentions- CVE-2026-4194099%9.3Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
- CVE-2026-87886<1%7.8Incorrect Default Permissions in Acronis Backup Plugin for cPanel & WHM and Plesk Enable Privilege Escalation
- CVE-2026-67401<1%9.9Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
- Unauthenticated shell command injection in ConfigServer Security & Firewall (CSF)
- CVE-2026-65643<1%8.7Authenticated eval injection in cPanel enables root code execution
- CalDAV/CardDAV Permission Flaw in cPanel Lets Local Users Read Other Accounts' Data
- Authenticated OS command injection in Multilang adminbin
- Authenticated Privilege Escalation to Root RCE in cPanel & WHM
- Stored XSS in WHM Mass Modify Accounts
- Stored XSS in cPanel WHM Manage SSL Hosts
Appears with
- WHMproduct · 10
- cPanelproduct · 9
- Pleskvendor · 6
- cPanelorganization · 6
- Acronisvendor · 5
- WP Squaredproduct · 5
- Acronis Backup plugin for cPanel & WHMproduct · 5
- Acronis Backup extension for Pleskproduct · 4
- ConfigServer Security & Firewallproduct · 4
- WebProsvendor · 4
- cPanel & WHMproduct · 3
- CISAorganization · 3
- EmailTrackproduct · 3
- JPCERT/CCorganization · 2
- cPanel/WHMproduct · 2
- Canadian Centre for Cyber Securityorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.