First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed

Critical cPanel vulnerability CVE-2026-41940 (CVSS 9.8) was actively exploited in the wild before patches shipped, affecting an estimated ~1.5 million internet-exposed cPanel instances; hosting providers reported blocking access and deploying updates, and there is at least one anecdotal report of ransomware demand following exploitation.