Die Ransomware-Gruppe 'Sorry' nutzt eine kritische Schwachstelle in cPanel und WHM aus, um Systeme zu kompromittieren. Weltweit sind bereits über 44.000 Instanzen betroffen; Administratoren werden zur sofortigen Installation von Sicherheitsupdates aufgefordert.
cPanel ve WebHost Manager yazılımında tespit edilen CVE-2026-41940 kritik güvenlik açığı, milyonlarca sunucuyu tehdit ediyor. Saldırganların yönetim paneline yetkisiz erişim sağlamasına olanak tanıyan zafiyet, şubat ayından bu yana kötüye kullanılıyor. Kanada Siber Güvenlik Ajansı acil yama uygulanmasını çağırırken, Namecheap ve Hostgator gibi önde gelen hosting firmaları önlemler aldı.
Security researchers have discovered a critical vulnerability (CVE-2026-41940) in cPanel and WebHost Manager that allows remote attackers to bypass authentication and gain full administrative control of servers. The flaw affects all supported versions of the widely-used web hosting software, estimated to be used by tens of millions of website owners. Canada's cybersecurity agency warns exploitation is highly probable, prompting major hosting providers including Namecheap and Hostgator to patch systems. KnownHost discovered evidence of active exploitation dating back to February.
Eine kritische Sicherheitslücke (CVE-2026-41940) in cPanel und WebHost Manager erlaubt Remote-Angriffern die Authentifizierung zu umgehen und unbefugt auf das Controlpanel zuzugifen. Betroffen sind alle Versionen ab 11.40. Der Hersteller hat Patches bereitgestellt und rät zur zeitnahen Installation. Alternativ können Admins Ports blockieren oder Services stoppen.
