shared hosting

CISA confirms months-long exploitation of critical cPanel flaw affecting 70 million domains

CVE-2026-41940 gave attackers root-level server access since February—two months before patches existed—exposing the fragility of delegated hosting infrastructure.