Panel patches authentication flaw across supported versions, prompting Namecheap port blocks and temporary access limits.

A critical-severity authentication bypass vulnerability in cPanel & WHM has been exploited as a zero-day since February 2026.

Panel patched three vulnerabilities, including two 8.8 CVSS flaws, reducing risks of code execution and privilege escalation.

Web hosts are scrambling to fix the bug under active attack by hackers. One company said hackers have been abusing the bug ...

A security flaw in the cPanel web hosting control panel allows attackers to circumvent two-factor authentication (2FA) checks via brute-force attacks for domains managed using vulnerable cPanel & ...