cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

Summary: cPanel released updates addressing three vulnerabilities in cPanel and Web Host Manager that could be exploited for privilege escalation, code execution, and denial-of-service, with version 110.0.114 issued as a direct update for customers still on CentOS 6 or CloudLinux 6. The disclosure follows the weaponization of a separate critical flaw, CVE-2026-41940, as a zero-day to deliver Mirai botnet variants and a ransomware strain called Sorry, though there is no evidence the three new vulnerabilities have been exploited in the wild.
What's compelling: The prior cPanel flaw, CVE-2026-41940, was already used as a zero-day to push Mirai botnet variants and Sorry ransomware, so a fresh set of privilege-escalation and code-execution bugs lands on a product attackers have shown they will exploit.

Read the original at The Hacker News ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2026-41940
Related: Lite Speed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root Cyber Risks ·
CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited Cyber Risks ·
CVE-2026-41940: Web Pros cPanel & WHM and WP2 (Word Press Squared) Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Apr 30, 2026