What's Going OnWe're reaching out regarding a security vulnerability (CVE-2026-41940) disclosed on April 28, 2026, with a "critical" rating (CVSS 9.8). This vulnerability is present in cPanel, WHM and WP Squared. If left unpatched, an attacker may be able to bypass authentication, including instances with MFA configured. This gives them full ...