CPanel Archives • Daily CyberSecurity

cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers

cPanel PHP update fixes PHP2Shell flaws and WP Toolkit vulnerability

cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers

Do Son October 22, 2026

A cPanel PHP update fixes PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619, while WP Toolkit 6.11.5 patches CVE-2026-107663.

cPanel Security Vulnerabilities Expose WHM Web Servers Critical cPanel security vulnerabilities exposing WHM web servers

cPanel Security Vulnerabilities Expose WHM Web Servers

Do Son October 2, 2026

Discover critical cPanel security vulnerabilities exposing WHM servers to root hijacking. Learn how to patch these cPanel security vulnerabilities today.

Critical cPanel Security Vulnerabilities Allow Root Escalation Diagram illustrating cPanel security vulnerabilities and critical cPanel security vulnerabilities affecting WHM

Critical cPanel Security Vulnerabilities Allow Root Escalation

Do Son September 24, 2026

cPanel patched critical cPanel security vulnerabilities including CVE-2026-87899. Update cPanel and WP Toolkit now to prevent privilege escalation.

Acronis cPanel Plugin Flaw Exploited in the Wild, Patch Now Acronis cPanel plugin vulnerability under active exploitation in the wild on web hosting backup servers

Acronis cPanel plugin vulnerability under active exploitation in the wild on web hosting backup servers

Acronis cPanel Plugin Flaw Exploited in the Wild, Patch Now

Do Son September 14, 2026

An Acronis cPanel plugin vulnerability is exploited in the wild. Acronis urges an immediate update to 1.9.3 HF3 or 1.9.4. Patch your backup plugin now.

CVE-2026-67401: cPanel Flaw Grants Full Control of the Server cPanel SQL injection flaw exploit diagram showing CVE-2026-67401

CVE-2026-67401: cPanel Flaw Grants Full Control of the Server

Do Son September 9, 2026

A critical CVE-2026-67401 cPanel SQL injection flaw in EmailTrack allows authenticated users to gain full control of the server. Patch your system today.

CVE-2026-58048: cPanel Root SQL Execution Flaw Patched cPanel root SQL execution vulnerability CVE-2026-58048 database privilege escalation diagram

cPanel root SQL execution vulnerability CVE-2026-58048 database privilege escalation diagram

CVE-2026-58048: cPanel Root SQL Execution Flaw Patched

Do Son August 4, 2026

CVE-2026-58048 lets cPanel users run SQL commands in root context, CVSS 9.4. A second flaw, CVE-2026-58047, enables request smuggling.

LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)

LiteSpeed cPanel privilege escalation CVE-2026-54420, active exploitation, symlink vulnerability LiteSpeed cPanel Plugin Vulnerability CVE-2026-48172 Exploit

LiteSpeed cPanel Privilege Escalation Flaw Exploited in the Wild (CVE-2026-54420)

Do Son June 16, 2026

CVE-2026-54420, a LiteSpeed cPanel privilege escalation flaw, is exploited in the wild to gain root on shared hosting. Patch to plugin v2.4.8 now.

cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi cPanel WHM Vulnerabilities 2026 CVE-2026-29205 Arbitrary File Read cPanel Security Vulnerability Perl Injection Exploit cPanel Authentication WHM Security cPanel Privilege Escalation, Directory Traversal LPE

cPanel & WHM Patch 5 High-Severity Flaws, Including 8.6 Severity File Read and SQLi

Do Son May 15, 2026

cPanel & WHM fix 5 critical vulnerabilities (CVE-2026-29205). Fixes for arbitrary file read, SQLi, and privilege escalation are now live. Update now!

Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands cPanel Authentication Bypass CVE-2026-41940 Exploitation

Critical cPanel Auth Bypass CVE-2026-41940 Exploited by Thousands

Do Son May 12, 2026

Urgent: cPanel & WHM hit by global 9.8 CVSS auth bypass. Over 2,000 IPs are actively hijacking servers for data theft and ransomware. Patch immediately!

Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM cPanel WHM Vulnerabilities 2026 CVE-2026-29205 Arbitrary File Read cPanel Security Vulnerability Perl Injection Exploit cPanel Authentication WHM Security cPanel Privilege Escalation, Directory Traversal LPE

Root Access at Risk: Perl Injection and Symlink Flaws Hit cPanel & WHM

Do Son May 11, 2026

Update cPanel immediately! High-severity vulnerabilities (CVSS 8.8) allow Perl injection and privilege escalation. Protect your hosting environment now.

The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026) cPanel Authentication Bypass Architectural Mismatch

The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)

Do Son May 4, 2026

Weekly Triage: 1,134 new vulnerabilities found, including a 9.8 critical bypass in cPanel/WHM and active Express.js logic flaws. Patch your systems now.

44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge cPanel Authentication Bypass CVE-2026-41940

44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge

Do Son May 2, 2026

CISA warns of cPanel CVE-2026-41940 (CVSS 9.8). 44,000 IPs compromised via authentication bypass, fueling ransomware and botnets. Patch by May 3rd!

Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day CVE-2026-41940 cPanel Authentication

Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day

Do Son April 29, 2026

cPanel issues emergency patches for a critical authentication vulnerability affecting all supported versions. Run /scripts/upcp --force immediately to patch.

Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover cPanel WHM Vulnerabilities 2026 CVE-2026-29205 Arbitrary File Read cPanel Security Vulnerability Perl Injection Exploit cPanel Authentication WHM Security cPanel Privilege Escalation, Directory Traversal LPE

Critical cPanel Flaw (CVSS 9.3) Allows Directory Traversal LPE for Full Server Takeover

Do Son December 3, 2025

A Critical (CVSS 9.3) LPE flaw in cPanel's Team Manager API allows a standard user to break out of their directory via path traversal and compromise the shared hosting server. Update immediately.

Cybercriminals Exploit Swap Files: New E-commerce Skimming Tactic credit card skimmers

Cybercriminals Exploit Swap Files: New E-commerce Skimming Tactic

Do Son July 20, 2024

a novel attack technique targeting e-commerce websites, where cybercriminals abuse swap files to maintain persistent credit card skimmers