CPanel’s Black Week: Three New Vulnerabilities Patched After Ransomware Attack on 44,000 Servers
Summary
The article reports on cPanel's emergency fixes for three new CVEs (CVE-2026-29201/29202/29203) following a ransomware attack that compromised about 44,000 servers. It details the CVSS severities, explains the risk vectors (arbitrary file read, arbitrary Perl code execution, and privilege escalation via unsafe symlink), and outlines patch steps and post-incident checks. It also ties the incident to a broader pattern of rapid disclosure and automated updates as part of incident response.