Connect with us

Tech

Hackers are actively exploiting a bug in cPanel, used by millions of websites

Published

on

Security researchers are sounding the alarm on a newly discovered vulnerability in the widely used web server management software cPanel and WebHost Manager (WHM). 

The bug allows hackers to hijack and take full control of the servers running the affected software, which is thought to be used by tens of millions of website owners around the world.

Many commercial web hosting companies have patched their customers’ systems already. But the cPanel maker urged customers to ensure that their systems are patched as the bug affects all supported versions of the software.

cPanel and WHM are two software suites used for managing web servers that host websites, manage emails, and handle important configurations and databases needed to maintain an internet domain. The two suites have deep-access to the servers that they manage, allowing a malicious hacker potentially unrestricted access to data managed by the affected software.

The bug, officially tracked as CVE-2026-41940, allows malicious hackers to remotely bypass its login screen to gain full access to the software’s administration panel. 

Given the ubiquity of the cPanel and WHM software across the web hosting industry, hackers could compromise potentially large numbers of websites that haven’t patched the bug.

Canada’s national cybersecurity agency said in an advisory that the bug could be exploited to compromise websites on shared hosting servers, such as large web hosting companies.

The agency said that “exploitation is highly probable” and that immediate action from cPanel customers, or their web hosts, is necessary to prevent malicious access.

Web hosting giant Namecheap, which uses cPanel to allow its customers to manage their web servers, said the company blocked access to customers’ cPanel panels after learning of the flaw to prevent exploitation, and to give it time to patch its customers’ systems. 

Hostgator also said it patched its systems and is considering the bug a “critical authentication-bypass exploit.”

One web hosting company says it found evidence that hackers have been abusing the vulnerability for months before the attempts were discovered.

KnownHost CEO Daniel Pearson said in a post on Reddit that his company has seen attempts to exploit the vulnerability as far back as February 23. The company said it also briefly began blocking access to customer systems before applying patches.

According to Pearson, around 30 servers at KnownHost showed signs of unauthorized attempted access out of thousands of computers on its network. Pearson likened the efforts to attempts, and has not seen signs of active compromise. cPanel also said it rolled out a security fix for WP Squared, a similar tool for managing WordPress websites.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

>

Continue Reading

Tech

Building Assistive Robots to Help People Live Independently

Published

on

In this edition of our A Day in the Life of a Roboticist series, we meet Charlie Kemp, cofounder and chief technology officer of Hello Robot, who develops mobile manipulators to help people in their homes and workplaces. His interest in robotics began with the grand challenges of artificial intelligence, and his work has taken him from humanoid robots at MIT to assistive robots for older adults and people with disabilities. “Working at Hello Robot is a rewarding experience,” he says. “I love the community using Stretch robots as research and development platforms. They’re discovering new ways that human-friendly robots can benefit society.”

Charlie Kemp, a man in black pants and a blue shirt, smiles and waves at the camera, standing next to a Stretch 4 mobile robot consisting of a wheeled base, a tall pole, an articulated arm, and a head with lights and cameras.
Charlie Kemp, cofounder and CTO of Hello Robot, develops assistive robots for homes and workplaces. Photo: Hello Robot

>

Continue Reading

Tech

Unveiling IC-STAR: Full-Flow Autonomy from Digital to Analog

Published

on

Learn how engineers can shift from manually managing tools and handoffs to defining objectives and supervising AI-driven execution across the silicon development lifecycle.

Key Takeaways

  • Explore four critical technologies enabling silicon design autonomy
  • Understand how autonomous AI accelerates complex engineering workflows
  • See real-world impact across semiconductor design and verification
  • Gain practical insights from Ambiq’s deployment of autonomous AI in production

>

Continue Reading

Tech

Best QR Code Payment Apps for 2026

Published

on

Compare six QR payment apps by checkout type, fees, customer requirements, integrations, and business use cases.

The post Best QR Code Payment Apps for 2026 appeared first on TechRepublic.

>

Continue Reading

Trending

Copyright © 2017 Zox News Theme. Theme by MVP Themes, powered by WordPress.