cPanel Authentication Bypass Zero-Day Exploited | MSSP Advisory

CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel that attackers have been exploiting since at least February 23, 2024, months before a patch was released. The vulnerability allows attackers to bypass authentication controls in the web-based hosting control panel that millions of shared hosting providers use to manage client websites and hosting accounts.

Your clients running websites on shared hosting are sitting ducks if their providers haven't patched this yet, and you won't know until sites get compromised or defaced. If you manage any hosting infrastructure or reseller accounts for clients using cPanel, your own operations could be compromised through the same authentication bypass, giving attackers admin access to multiple client hosting environments.

📬