thehackernews.com·May 11, 2026
Mr_Rot13 has exploited a critical vulnerability in cPanel (CVE-2026-41940) to deploy a backdoor called Filemanager, enabling remote attackers to gain elevated control through authentication bypass.
For a cybersecurity professional, the key insight is that the critical cPanel flaw CVE-2026-41940 is being actively exploited by threat actor Mr_Rot13 to deploy the Filemanager backdoor. Immediate action should be taken to patch this vulnerability to prevent authentication bypass and potential remote control by attackers, making it critical to prioritize patch management and monitor for signs of exploitation in environments deploying cPanel and WHM.