May 4, 2026

Sorry Ransomware Exploits Critical cPanel Vulnerability

A critical cPanel security vulnerability is being mass-exploited by ransomware operators, and tens of thousands of web servers are already compromised. Tracked as CVE-2026-41940, the flaw carries a severity score of 9.8 out of 10. It lets attackers bypass authentication entirely and seize full control of a server without a valid password. An emergency patch now exists, but exploitation began

cPanel Security Vulnerability