CERT24cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager BackdoorLoading data…
CERT24Threat Observatory
Period

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The recently disclosed critical cPanel and WebHost Manager (WHM) vulnerability CVE-2026-41940 is being actively exploited to deploy a backdoor named Filemanager. Exploitation can enable authentication bypass and allow remote attackers to gain elevated control of the control panel.

← Back to intelligence

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The recently disclosed critical cPanel and WebHost Manager (WHM) vulnerability CVE-2026-41940 is being actively exploited to deploy a backdoor named Filemanager. Exploitation can enable authentication bypass and allow remote attackers to gain elevated control of the control panel.