home.social
Sign in Create account

#cve_2026_41940 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cve_2026_41940, aggregated by home.social.

  1. The Threat Codex @[email protected] ·

    Threat Actor Mr_Rot13 Actively Exploits CVE-2026-41940 for Backdoor Deployment
    #CVE_2026_41940 #Mr_Rot13
    blog.xlab.qianxin.com/mr_rot13

    #cve_2026_41940 #mr_rot13
  2. The Threat Codex @[email protected] ·

    Tracking the "Sorry" Extortionist Campaign Against cPanel Websites
    #SorryRansomware #CVE_2026_41940
    blog.bournemouth2600.org/2026/

    #sorryransomware #cve_2026_41940
  3. The Threat Codex @[email protected] ·

    South-East Asian Military Entities Targeted via cPanel (CVE-2026-41940)
    #CVE_2026_41940
    ctrlaltintel.com/research/SEA-

    #cve_2026_41940
  4. :mastodon: decio @[email protected] ·

    ⚠️ Si vous administrez ou connaissez quelqu’un qui administre un ou des hébergements avec cPanel & WHM, attention : la vulnérabilité critique CVE-2026-41940 ( vulnerability.circl.lu/vuln/CV ) permets à un attaquant distant de contourner l’authentification et d’obtenir un accès administrateur sans identifiants.
    L’exploitation se fait via les interfaces HTTPS exposées, sans interaction utilisateur, ce qui en fait un risque immédiat pour les serveurs accessibles depuis Internet.

    Ce type de faille est particulièrement recherché par les cybercriminels et par certaines APT gravitant autour de la Russie : prise de contrôle d’hébergements, déploiement de webshells, détournement de domaines, modification DNS/mail, vol de données ou rebond vers d’autres systèmes.

    À corriger en priorité : appliquez les versions corrigées, limitez l’accès à cPanel/WHM via VPN ou allowlist IP, et vérifiez les journaux d’accès.

    🩹
    👇
    https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026

    🔍
    👇
    https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/

    ⬇️
    https://www.rapid7.com/blog/post/etr-cve-2026-41940-cpanel-whm-authentication-bypass/

    💬
    ⬇️
    infosec.pub/post/45774673

    #CyberVeille #cpanel #CVE_2026_41940

    #cyberveille #cpanel #cve_2026_41940
  5. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0430] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-41940 (secdb.nttzen.cloud/cve/detail/)
    - Name: WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: WebPros
    - Product: cPanel & WHM and WP2 (WordPress Squared)
    - Notes: support.cpanel.net/hc/en-us/ar ; docs.cpanel.net/release-notes/ ; docs.wpsquared.com/changelogs/ ; nvd.nist.gov/vuln/detail/CVE-2;

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260430 #cisa20260430 #cve_2026_41940 #cve202641940

    #secdb #infosec #cve #cisa_kev #cisa_20260430 #cisa20260430
  6. ZEN SecDB @[email protected] ·

    🚨 [CISA-2026:0430] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-41940 (secdb.nttzen.cloud/cve/detail/)
    - Name: WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
    - Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: WebPros
    - Product: cPanel & WHM and WP2 (WordPress Squared)
    - Notes: support.cpanel.net/hc/en-us/ar ; docs.cpanel.net/release-notes/ ; docs.wpsquared.com/changelogs/ ; nvd.nist.gov/vuln/detail/CVE-2;

    #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260430 #cisa20260430 #cve_2026_41940 #cve202641940

    #cve202641940 #cve_2026_41940 #cisa20260430 #cisa_20260430 #cisa_kev #cve
  7. The Threat Codex @[email protected] ·

    The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
    #CVE_2026_41940
    labs.watchtowr.com/the-interne

    #cve_2026_41940