Real Cases of Hacked cPanel Servers in 2026

Quick answer: Real cPanel server hacks in 2026 involved the CVE-2026-41940 exploit, which allowed hackers to bypass login and deploy the deadly “Sorry” ransomware (using ChaCha20/RSA-2048 encryption), steal databases and email data, install crypto miners (XMRig), and botnets (Mirai, nuclear.x86). Over 7,135 cPanel/WHM servers were confirmed infected with .sorry encrypted files, government targets included Philippines military and Laos […]

17 mins read