🚨 On April 28, 2026, #cPanel issued a security update to fix a critical vulnerability affecting its WHM and WP Squared products. A query for potential targets returned 1.5 million instances exposed to the internet. CVE-2026-41940 has a CVSS score of 9.8 and allows unauthenticated remote attackers to bypass authentication, granting unauthorized administrative access to the web hosting control panel software. Find our mitigation guidance and more in a new blog: https://r-7.co/4vZ0vgX