alt.hn

4/30/2026 at 8:43:57 PM

Hackers are actively exploiting a bug in cPanel and WHM

https://techcrunch.com/2026/04/30/hackers-are-actively-exploiting-a-bug-in-cpanel-used-by-millions-of-websites/

by dotmanish

5/1/2026 at 12:14:15 AM

There must be so many (small) shared hosting companies that don't update their software, those poor customers.

by sikozu

4/30/2026 at 11:35:06 PM

With this (CVE-2026-41940) and copy.fail (CVE-2026-3143), it must be an exciting time in the shared hosting business right now… Glad I've been out of it for a long time.

by dspillett

5/1/2026 at 3:52:58 PM

Luckily my site uses Plesk after moving away from cPanel years ago.

I have to wonder if this issue is due to never reviewing auto-test scripts ?

I know where I worked, testing is now an afterthought and half the time testing means no issues compiling and deploying :)

We had a separate testing group and they caught lots of issues. But due to Agile, they were all fired years ago.

by jmclnx

5/1/2026 at 6:41:34 PM

Plesk is a separate team owned by the same parent company.

by cestith

5/1/2026 at 9:16:19 AM

Which are the safest control panels^ ? Been thinking about Hostineer which developed and dogfooded ApisCP over 20 years.

[^] a product made for commercial operators stuffing thousands of PHP sites into a server, so no Coolify, Google Cloud Run.

by aitchnyu