cybercrime.clubhttps://cybercrime.club/tags/whm/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 29 Apr 2026 23:08:41 -0400cPanel & WHM CVE-2026-41940: Critical Auth Bypass Triggers Global Hosting Lockdownhttps://cybercrime.club/posts/cpanel-cve-2026-41940-whm-authentication-bypass-internet-meltdown/Wed, 29 Apr 2026 23:08:41 -0400https://cybercrime.club/posts/cpanel-cve-2026-41940-whm-authentication-bypass-internet-meltdown/An unauthenticated CRLF-injection auth bypass in cPanel & WHM (CVSS 9.8) sent every major hosting provider into emergency port-blocking mode within hours of disclosure. All supported release tracks are affected.vulnerabilities