{"uuid": "ba2c2fea-1877-42e3-951c-ecb7d19ed683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mkqbs62e6w2m", "content": "cPanel shipped an emergency patch Tuesday for CVE-2026-41940, CVSS 9.8, exploited in the wild. The daemon writes the session file to disk, then checks the password. Pre-auth file writes are a pattern in hosting panels, not an edge case. I have seen this fail audit before.\n\n#CyberSecurity #InfoSec", "creation_timestamp": "2026-04-30T18:50:35.972760Z"}