OpenEMR

Critical cPanel and WHM bug exploited as a zero-day, PoC now available cPanel says CVE-2026-41940 is an authentication bypass flaw affecting cPanel, WHM, and WP Squared, and BleepingComputer reports it has already been exploited in the wild, with one hosting provider seeing attempts as early as February. The issue lets attackers potentially take over the cPanel host and the sites it manages, which makes this a high-priority patch item for internet-exposed hosting infrastructure.   Sandhills…