cPanel Critical Flaw Sorry Ransomware Mass Exploitation | MSSP Advisory

A critical cPanel vulnerability CVE-2024-41940 is being mass-exploited to deploy Sorry ransomware across hosted websites. Attackers exploit this flaw to gain unauthorized access to web hosting control panels, then encrypt website data and demand ransom payments. The vulnerability affects cPanel installations that have not applied recent security patches.

Your hosting clients running cPanel are direct targets right now, and every compromised website becomes a client retention problem when they ask why you did not warn them. Your own web hosting infrastructure using cPanel creates a path for attackers to compromise your client management systems and potentially pivot into customer networks through shared hosting environments.

📬