Tag: cpanel
44 articles
Security
cPanel Patched Five More CVEs. One Fix Is Already Reported Incomplete.
cPanel's May 13 patch covers five new CVEs, but security researcher Shubham Shah reported within hours that the fix for CVE-2026-29205 is incomplete and all cPanel instances remain exploitable until a working patch lands.
Security
Three cPanel Patches and DirtyFrag Fixes in One Day. Here Is Where Things Stand.
Three cPanel patches and Linux kernel fixes for DirtyFrag landed on May 8. Here is what got fixed and what to verify with your hosting provider.
Security
A Compromised Server Is the Beginning. Here Is What Breach Law Requires Next.
Change Healthcare's $3.1 billion in breach costs is the new normal of what a serious compromise sets in motion: parallel notification clocks across GDPR, NIS2, DORA, and HIPAA; personal liability for CISOs and boards; and a cyber insurance market with conditions that can deny coverage at the worst moment.
Security
cPanel Is Patching Three New CVEs Today. Technical Details Come With the Fix.
Three new cPanel vulnerabilities, CVE-2026-29201, CVE-2026-29202, and CVE-2026-29203, are being patched today at 12:00pm EST, with technical details withheld until the fix is live.
Security
CVE-2026-41940 Live: cPanel Authentication Bypass, Active Exploitation, and What Comes Next
CVE-2026-41940, the cPanel authentication bypass exploited for 64 days before disclosure, is still developing. 44,000 servers likely compromised, a public exploit on GitHub, three active campaigns. This page is updated in real time as new information surfaces.
Security
The cPanel Zero-Day Was Active for 64 Days Before Anyone Knew
CVE-2026-41940, the cPanel authentication bypass from April 28, was being exploited since February 23, operated as a zero-day for 64 days, and was added to CISA's Known Exploited Vulnerabilities list with 1.5 million internet-exposed instances counted by Rapid7.
Security
cPanel Had an Authentication Bypass. Exploits Were Already in the Wild.
cPanel disclosed a critical authentication bypass on April 28 affecting nearly all versions of cPanel and WHM, with active exploits confirmed in the wild before the patch was released, forcing hosting.com, Namecheap, KnownHost, HostPapa, and InMotion Hosting to take cPanel access offline globally.
Other
Is Webuzo any alternative to cPanel? See what hosting pros think about it in February 2026
A recent discussion on WebHostingTalk – “I need feedback on Webuzo” – triggered an interesting exchange among hosting operators testing Webuzo as a potential alternative to…
Other
What hosting providers are saying about cPanel in early 2026
A recent thread on WebHostingTalk – “A personal and honest perspective on cPanel – beyond pricing complaints” – triggered a long discussion among hosting operators about…
Industry reports
WHMCS 2026 price increase: stability comes at a higher cost
Change is coming to the world of web hosting automation - and it’s going to affect nearly every WHMCS user. Early in 2026, specifically on January 1st, WHMCS will roll out a new pricing structure that marks one of the most significant adjustments in recent years.
Reach hosting professionals
Sponsor webhosting.today and get in front of hosting buyers, founders and engineers.
50k+monthly readers
777articles