CISA Adds One Known Exploited Vulnerability to Catalog
Source: US-CERT Current Activity · Category: Government Advisory
CISA added CVE-2026-41940 (cPanel/WHM and WP2 missing authentication) to Known Exploited Vulnerabilities Catalog indicating active exploitation. If firm uses cPanel, WHM, or WordPress hosting, apply patches immediately and audit user access controls.