Critical pre-authentication bypass in cPanel & WHM. Exploited in ransomware campaigns since February 2026.
NVD
All 3 articles
Critical pre-authentication bypass in cPanel & WHM. Exploited in ransomware campaigns since February 2026.
Elevation of privilege in Windows Kerberos KDC. Actively exploited. Patch included in May 2026 update.
Pre-authentication heap-based buffer overflow in SonicWall SMA 1000 series allowing unauthenticated RCE.