scanning advisory feeds…

Critical cPanel & WHM Vulnerability Exploited as Zero-Day for Months

The authentication bypass flaw allows attackers to gain administrative access to vulnerable servers.

Grace Ops

CONTENT OPTIMIZATION · AEO/GEO

STALE

Score Card

citation-worthiness 0–100

/ 100

The page is a near-empty incident stub with no named CVE, no CVSS score, no technical specifics, and body text so thin and hedged that no LLM would cite it over the original SecurityWeek source it links to.

Direct answer5/20
Statistics0/20
Structure7/15
Authority3/15
Freshness7/15
Topical depth3/15

Topic Tracks

discussion

0 comments

Loading comments…

audit trail / provenance4

Provenance

Claims tie surfaced fields back to sources, models, or heuristics.

severity.upliftheuristicn/a
CVE or advisory identifiers detected — floor raised to at least high.
severity.upliftheuristicn/a
Active exploitation / in-the-wild language detected — floor raised to at least high.
severity.upliftheuristicn/a
Ransomware campaign indicators detected — floor raised to at least high.
severity.upliftheuristicn/a
Combined zero-day/exploit + ransomware/mass-impact signals → critical.

What changed

Append-only revisions when ingest or analysts evolve the record.

No revision rows stored yet.

Sources

https://www.securityweek.com/critical-cpanel-whm-vulnerability-exploited-as-zero-day-for-months/

Curated Apr 30, 2026 by Aidan Duffy, Threat intelligence editor, AHackaday./Methodology/Sources verified.

Brief grounded in 1 source.