Security: CVE-2026-41940 cPanel & WHM Security Update (28 Apr 2026)

cPanel published a security update (CVE-2026-41940) targeting cPanel & WHM. We have applied the fixed cPanel & WHM build to all managed and reseller hosting servers under HostUpCloud management. Action required: none for managed customers — patches are deployed by our team. Self-managed customers running cPanel should upgrade to the latest cPanel & WHM build at their earliest convenience. We will keep this advisory open until all affected nodes report the patched version. No customer-impacting downtime expected during the rollout. Reference: https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026