News

Hackers are still exploiting the cPanel bug to gain control of thousands of websites

Published

4 months ago

May 4, 2026

Preport

Nearly a week after the makers of the popular web server management software cPanel and WebHost Manager (WHM) alerted users of a critical flaw in its software, hackers are still targeting thousands of websites that use the vulnerable software.

As of Monday there are more than 550,000 potentially vulnerable servers running cPanel, a number that has remained stable for days. And there are now around 2,000 cPanel instances likely compromised, down from around 44,000 on Thursday. These statistics are published by Shadowserver, a nonprofit organization that scans and monitors the internet for cyberattacks.

On Thursday, security researchers alerted that hackers started compromising servers running cPanel and WHM, taking advantage of a bug that allowed the attackers to take full control of and hijack the vulnerable servers via their control panels.

As Bleeping Computer reported, the extent of the damage is visible by the fact that Google has indexed dozens of websites that at some point displayed a message from a group of hackers that claimed to have encrypted the victim’s files in an apparent ransomware attack. Some of those sites now load normally.

The ransom note included a chat ID for the victims to contact the hackers, who did not immediately respond to TechCrunch’s request for comment.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on Thursday that the vulnerability — tracked as CVE-2026-41940 — was being exploited in the wild, and added it to its Known Exploited Vulnerabilities (KEV) catalog. CISA asked government agencies to patch by Sunday. CISA did not immediately respond to a request for comment, asking whether it could confirm that government agencies have patched their servers.

The attacks against web servers running cPanel and WHM have likely been ongoing since much earlier than the vulnerability was disclosed. According to KnownHost CEO Daniel Pearson, his company detected attacks as far back as February 23.

Techcrunch event

San Francisco, CA
|
October 13-15, 2026

Executives at Webpros, the company that develops cPanel and WHM and says it powers 60 million domains, did not respond to a request for comment.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Related Topics:bug control cPanel exploiting gain Hackers thousands websites

Up Next

NNPC Signs MoU with Chinese Firms to Revive Port Harcourt, Warri Refineries

Don't Miss

Elon Musk’s only expert witness at the OpenAI trial fears an AGI arms race

Click to comment

News

I will end 2027 campaign if anyone proves I collected money in US – Peter Obi

Published

1 hour ago

September 15, 2026

Preport

The Nigeria Democratic Congress, NDC, presidential candidate, Peter Obi, has given a condition for stopping his 2027 political campaign.

Obi vowed to stop his presidential campaign if anybody could provide evidence of him collecting money from Nigerians in the diaspora.

Speaking in the United States (US), Obi dismissed claims that he was in America to source funds for his presidential campaign.

He said:

News

Terrorists kill nine passengers in Plateau bus attack

Published

1 hour ago

September 15, 2026

Preport

4E8AAAC4 C3E8 4C65 9CFD 94C52F5CE2CD.jpeg

Nine people have been killed after gunmen opened fire on a passenger bus at Dungus, Kuru District, Jos South council area.

The police command in Plateau confirmed the attack in a statement by its spokesman, Alfred Alabo, on Monday.

The command said it received a distress report at about 7:45 p.m. on Sunday that terrorists operating on a motorcycle had attacked the bus.

According to the statement, the Toyota bus, with registration number BUU 621 ZL, was conveying passengers to Jos when the gunmen opened fire.

It said seven people were confirmed dead at the scene, while two others who sustained gunshot injuries later died in hospital. The police said the development brought the total number of fatalities from the attack to nine.

The police commissioner, Ayodeji Faniyan, immediately mobilised Mobile Police operatives, tactical teams, homicide detectives and forensic experts to the scene.

(NAN)