🧰 cPanel

The items that name it 6

• eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC
  repoas affected products2026-10-21

  Hosting panel listed for PHP environment inventory

• Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms
  writeupas affected products2026-09-18It is written here as cPanel (port 2083).

  port 2083

• Socket: GitHub Actions Abuse Powers Distributed cPanel/WHM Exploitation Campaign
  writeupas affected products2026-07-23

  Account-level hosting administration platform targeted via CVE-2026-41940 authentication bypass; exploitation can expose websites, databases, email accounts, and application secrets of a single customer.

• OpenSourceMalware Blog
  articleas affected products2026-07-18

  Exploitation discussed alongside git hook persistence and other techniques.

• Open Source Malware Podcast — episodes
  otheras affected products2026-05-22

  Exploitation discussed

• CVE-2026-41940 (SessionScribe): cPanel/WHM Session Forgery Reverse-Engineered
  writeupas classification.technologies2026-04-29