{"uuid": "e48933c9-3ed2-4108-95a4-5c3d03eae38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41940", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116562100312666542", "content": "CVE-2026-41940 is under active mass exploitation.\nResearchers say threat group \u201cMr_Rot13\u201d is exploiting the critical cPanel flaw to steal credentials, deploy webshells, and gain persistent access across hosting infrastructure.\n2,000+ attacking IPs observed globally.\nhttps://www.technadu.com/cve-2026-41940-vulnerability-in-cpanel-exploited-to-steal-credentials/627803/\n#CyberSecurity #ThreatIntel #cPanel", "creation_timestamp": "2026-05-12T14:35:02.750869Z"}