The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)

Hello! Yes, it's all a disaster again!

Let's get this party started:

0:00

/0:12

No comments today, so imagine this:

• We wrote something that we find very funny,
• Nobody else gets it,
• But everyone humors us

Just like a typical watchTowr Labs blog introduction.

As with all watchTowr Labs research, this didn't start with a blog post - but is the end result of a coordinated capability that enables watchTowr clients to rapidly react to, and autonomously mitigate, emerging threats.…