WHM

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 9, 2026
Last mentionedSep 21, 2026

Timeline

2 articles · newest first

Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware

Attackers are exploiting CVE-2026-41940, a critical unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and recruit them into Mirai botnets.

Cyber Security NewsSep 21, 09:11 UTC · Sep 21, 2026Exploit / PoCExploitedCVE-2026-419401

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

cPanel patched CVE-2026-67401, an SQL injection in EmailTrack letting an account with mail privileges run code as root on the server.

The Hacker NewsSep 9, 08:19 UTC · Sep 9, 2026VulnerabilityCVE-2026-674012 · 1 read

Related CVEs

by mentions

CVE-2026-4194099%9.3
Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
published Apr 29, 2026WebPros cPanelKEVRansomwarePoC ×9
CVE-2026-67401<1%9.9
Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
published Sep 9, 2026cPanel (WebPros) cPanelPoC ×5

Appears with

cPanelvendor · 2
EmailTrackproduct · 1
WHMproduct · 1
Hadrianorganization · 1
cPanelproduct · 1
JPCERT/CCorganization · 1
Miraimalware · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned Sep 21, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.