News

CVE-2026-41940 was exploited as a zero-day for 68 days before a patch existed. CISA was breached via Ivanti vulnerabilities it had just ordered patched. Volt Typhoon had 5-year US infrastructure access. The case-by-case record of how government networks keep getting owned.

CVE-2026-48172 in LiteSpeed User-End cPanel Plugin (2.3-2.4.4) lets any authenticated cPanel user run arbitrary scripts as root. CVSS 10.0, actively exploited, on the CISA KEV list. Patch to WHM Plugin 5.3.1.0 / cPanel Plugin 2.4.7 immediately.

Skynethosting took its entire cPanel fleet offline on May 1 in response to CVE-2026-41940, and as of May 14 some customer servers had been down for nearly two weeks, with one reseller publicly reporting a 30 percent client loss during the outage.

cPanel's May 13 patch covers five new CVEs, but security researcher Shubham Shah reported within hours that the fix for CVE-2026-29205 is incomplete and all cPanel instances remain exploitable until a working patch lands.

On May 8, cPanel closed three new vulnerabilities and Linux distributions shipped DirtyFrag kernel fixes. Two weeks of disclosures left providers with three separate patch tracks. Here is the complete status and the confirmations every shared hosting customer should request.

Change Healthcare's $3.1 billion in breach costs is the new normal of what a serious compromise sets in motion: parallel notification clocks across GDPR, NIS2, DORA, and HIPAA; personal liability for CISOs and boards; and a cyber insurance market with conditions that can deny coverage at the worst moment.

Three new cPanel vulnerabilities, CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203, are being patched today at 12:00pm EST, with technical details withheld until the fix is live.

CVE-2026-41940, the cPanel authentication bypass exploited for 64 days before disclosure, is still developing. 44,000 servers likely compromised, a public exploit on GitHub, three active campaigns. This page is updated in real time as new information surfaces.

CVE-2026-41940, the cPanel authentication bypass from April 28, was being exploited since February 23, operated as a zero-day for 64 days, and was added to CISA's Known Exploited Vulnerabilities list with 1.5 million internet-exposed instances counted by Rapid7.

cPanel disclosed a critical authentication bypass on April 28 affecting nearly all versions of cPanel and WHM, with active exploits confirmed in the wild before the patch was released, forcing hosting.com, Namecheap, KnownHost, HostPapa, and InMotion Hosting to take cPanel access offline globally.

A recent discussion on WebHostingTalk - “I need feedback on Webuzo” - triggered an interesting exchange among hosting operators testing Webuzo as a potential alternative to cPanel. Reading through the thread and comparing it with direct conversations we’ve had with shared hosting providers in recent weeks, one pattern emerges. Interest is real, but confidence is

A recent thread on WebHostingTalk - “A personal and honest perspective on cPanel - beyond pricing complaints” - triggered a long discussion among hosting operators about cPanel’s direction in 2026. Reading through the discussion, and comparing it with direct conversations we’ve had with shared hosting operators in recent weeks, one pattern is clear. No one

Change is coming to the world of web hosting automation - and it’s going to affect nearly every WHMCS user. Early in 2026, specifically on January 1st, WHMCS will roll out a new pricing structure that marks one of the most significant adjustments in recent years. For many hosting providers, developers, and digital agencies, this announcement has already sparked conversations and some concern about rising operational costs and long-term sustainability.

January 1, 2026. According to industry sources and partner communications, this update will introduce an average price increase of approximately 26%, alongside a structural change in how subscriptions are billed. These updates follow Plesk’s established pattern of annual price adjustments and reflect broader changes within the WebPros group’s commercial strategy.

As has become tradition, cPanel has once again announced updated licensing prices — and, as usual, the hosting community’s reaction ranges from weary sighs to outright frustration. Starting January 1, 2026, new pricing will take effect, and while the increases aren’t surprising, they will certainly sting for many administrators and resellers.

.ab-wrap{ max-width:940px; margin:0 auto; padding:36px 22px; font:400 18px/1.78 Inter,system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif; color:#0f172a; background:transparent; } .ab-kicker{display:inline-block;font-size:12px;font-weight:800;letter-spacing:.12em;text-transform:uppercase;color:#64748b;margin-bottom:10px;} .ab-lead{font-size:20px;line-height:1.9;margin:8px 0 22px;color:#111827;} .ab-hr{height:1px;border:0;background:linear-gradient(90deg,#e6e7eb,transparent);margin:30px 0;} h2{font-weight:800;font-size:30px;margin:18px 0 12px;color:#071029} h3{font-weight:800;font-size:22px;margin:16px 0 10px;color:#071029} p{margin:0 0 16px} .ab-list{list-style:none;margin:10px 0 18px;padding:0} .ab-list li{margin:10px 0 0 0;padding-left:28px;position:relative;font-size:17.5px} .ab-list li::before{content:"-";position:absolute;left:0;top:0;color:#071029;font-weight:800} .ab-fig{margin:26px 0;text-align:center} .ab-fig img{max-width:100%;height:auto;border-radius:10px;box-shadow:0 12px 30px rgba(2,6,23,0.08)} .ab-fig figcaption{margin-top:10px;font-size:15px;color:#475569} strong{font-weight:700;color:#000;} a{color:#0b64f2;text-decoration:none} a:hover{text-decoration:underline} adminbolt beta Why we built

Shared hosting has always been rooted in one core idea: to offer a low-cost, user-friendly solution for hosting websites, accessible even to those with minimal technical expertise. This simple yet revolutionary concept laid the foundation for the early 2000s web hosting industry and introduced millions of users to the internet. But as we step into

Choosing the right control panel for managing web hosting can make a big difference for your business.

The rising prices and stagnation in platform development, with its owners seemingly ignoring the needs of the community, could lead to a greater loss of customers in the long term if a suitable alternative emerges, as demonstrated by users' experiments in attempting to move away from WHMCS.

In the web hosting industry, frustration over cPanel's constant price increases is growing. Since 2019, cPanel has been raising its prices regularly, sometimes to the point where the cost of the license is higher than the cost of the server hardware. Does this mean users should start looking for alternatives?