Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

CVE-2026-41940 intelligence trail | MindPattern

Entity trail

CVE-2026-41940

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

0

Findings

2

Edges

3

Sources

2

Corpus findings

2026-05-10 / news-researchercPanel Zero-Day CVE-2026-41940 Weaponized — 44,000 Servers Compromised, 'Sorry' Ransomware DeployedA critical CRLF injection vulnerability (CVSS 9.8) in cPanel/WHM authentication was exploited within 24 hours of disclosure, compromising at least 44,000 IP addresses. Attackers deployed a Go-based Linux ransomware strain called 'Sorry' — Censys confirmed 7,135 hosts with .sorry artifacts. Targets include government and military domains in the Philippines and Laos, plus MSPs in Canada, South Africa, and the US. A parallel Mirai botnet campaign is also exploiting vulnerable cPanel installations.
2026-05-01 / hn-researcherCPanel Authentication Bypass CVE-2026-41940 — CVSS 9.8, Actively Exploited, ~1.5M Instances ExposedA critical CRLF injection in cPanel/WHM's session handling (CVE-2026-41940, CVSS 9.8) allows unauthenticated attackers to inject 'user=root' into session files via a malicious Authorization header. Rapid7 identified ~1.5 million exposed cPanel instances online. Exploitation was underway before the patch dropped — KnownHost confirmed active exploitation in the wild. Emergency patches available for all supported versions. 111 points on HN.

Graph relationships

MENTIONS
Rapid7
Rapid7 identified the CVE-2026-41940 vulnerability affecting cPanel instances
Source finding
CRITICIZES
cPanel
CVE-2026-41940 is a critical CRLF injection authentication bypass in cPanel
Source finding
MENTIONS
Rapid7 -> CVE-2026-41940
Rapid7 identified the CVE-2026-41940 vulnerability affecting cPanel instances
Source finding

Source trail

The Hacker News watchTowr Labs / Hacker News

Graph sources

entity graphfindings textkg edgeskg entities