{"id":9810,"date":"2026-05-26T23:11:20","date_gmt":"2026-05-27T03:11:20","guid":{"rendered":"https:\/\/hostingdiscussion.com\/news\/?p=9810"},"modified":"2026-05-26T23:11:20","modified_gmt":"2026-05-27T03:11:20","slug":"inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients","status":"publish","type":"post","link":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/","title":{"rendered":"InMotion Hosting blocks critical cPanel flaw across 144K clients"},"content":{"rendered":"<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">A security vulnerability carrying a severity score of 9.8 out of 10 surfaced in <a href=\"https:\/\/www.cpanel.net\/products\/cpanel-whm-features\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">cPanel and WHM<\/a> earlier this year, and for a few hours it represented a genuine worst-case scenario for web hosting infrastructure. The flaw, tracked as <a href=\"https:\/\/hostingdiscussion.com\/news\/hackers-have-been-quietly-exploiting-this-cpanel-flaw-since-february-and-millions-of-sites-are-at-risk\/\">CVE-2026-41940<\/a>, let a network-based attacker gain root-level access to a server without a valid username, password, or two-factor authentication code. No credentials required. The bug exposed nearly 1.5 million internet-facing servers globally.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\"><a href=\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-fixes-shared-hosting-crashes-replaces-linux-component-most-providers-never-touch\/\">InMotion Hosting<\/a> says it contained the threat across its customer base before broad exploitation reached its fleet. The company reports that 99% of its 144,870 potentially affected clients received protection without any action on their part and without service interruption.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">The response followed two distinct tracks. First, InMotion&#8217;s network operations team closed the vulnerable service ports at the network edge across its US East, US West, and European data center regions. That move blocked external access before engineers had patched every individual server. Then internal engineers ran automated scripts to push the official cPanel update across eligible systems, only reopening port access after verifying each server on a patched build.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">Websites, applications, databases, and email kept running throughout because the standard ports those services rely on never entered the restriction. Customers who needed manual intervention received direct outreach, migration checklists, and access to support teams. InMotion moved some to new hardware entirely.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\"><a href=\"https:\/\/www.cisa.gov\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">CISA<\/a> confirmed active exploitation of CVE-2026-41940 and added it to its Known Exploited Vulnerabilities catalog on April 30, 2026. Compliance teams, cyber insurers, and auditors generally stop treating an unpatched system as an oversight once a flaw appears on that list. At that point, it becomes a documented liability.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">The incident did not stop there. On May 13, <a href=\"https:\/\/hostingdiscussion.com\/news\/skynethosting-cpanel-shutdown-leaves-customers-without-websites-for-two-weeks\/\">cPanel<\/a> released another update addressing five additional vulnerabilities rated as high severity. InMotion deployed that update the same day across managed environments. Self-managed customers received patching guidance and around-the-clock support access, though the difference between managed action and self-managed guidance becomes a meaningful risk gap when exploitation moves quickly.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">cPanel&#8217;s widespread deployment across shared hosting, reseller accounts, and VPS environments is exactly what makes flaws in that layer so consequential. One control-panel defect scales across thousands of businesses simultaneously, most of which have no internal security team capable of responding in time.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A security vulnerability carrying a severity score of 9.8 out of 10 surfaced in cPanel and WHM earlier this year, and for a few hours it represented a genuine worst-case scenario for web hosting infrastructure. The flaw, tracked as CVE-2026-41940, let a network-based attacker gain root-level access to a server without a valid username, password, [&hellip;]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[71],"tags":[6829,6830,6542,2807,174,6831],"class_list":["post-9810","post","type-post","status-publish","format-standard","hentry","category-featured","tag-cpanel-authentication-bypass","tag-cpanel-security","tag-cve-2026-41940","tag-inmotion-hosting","tag-managed-hosting","tag-security-incident-response"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>InMotion Hosting blocks critical cPanel flaw across 144K clients - Web Hosting News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"InMotion Hosting blocks critical cPanel flaw across 144K clients - Web Hosting News\" \/>\n<meta property=\"og:description\" content=\"A security vulnerability carrying a severity score of 9.8 out of 10 surfaced in cPanel and WHM earlier this year, and for a few hours it represented a genuine worst-case scenario for web hosting infrastructure. The flaw, tracked as CVE-2026-41940, let a network-based attacker gain root-level access to a server without a valid username, password, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting News\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-27T03:11:20+00:00\" \/>\n<meta name=\"author\" content=\"Justine Juyad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Justine Juyad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/\",\"name\":\"InMotion Hosting blocks critical cPanel flaw across 144K clients - Web Hosting News\",\"isPartOf\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\"},\"datePublished\":\"2026-05-27T03:11:20+00:00\",\"dateModified\":\"2026-05-27T03:11:20+00:00\",\"author\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\"},\"breadcrumb\":{\"@id\":\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hostingdiscussion.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"InMotion Hosting blocks critical cPanel flaw across 144K clients\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#website\",\"url\":\"https:\/\/hostingdiscussion.com\/news\/\",\"name\":\"Web Hosting News\",\"description\":\"Cloud and web hosting industry daily news\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3\",\"name\":\"Justine Juyad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g\",\"caption\":\"Justine Juyad\"},\"description\":\"HostingDiscussion.com senior reporter\",\"sameAs\":[\"https:\/\/hostingdiscussion.com\/news\/\"],\"url\":\"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"InMotion Hosting blocks critical cPanel flaw across 144K clients - Web Hosting News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/","og_locale":"en_US","og_type":"article","og_title":"InMotion Hosting blocks critical cPanel flaw across 144K clients - Web Hosting News","og_description":"A security vulnerability carrying a severity score of 9.8 out of 10 surfaced in cPanel and WHM earlier this year, and for a few hours it represented a genuine worst-case scenario for web hosting infrastructure. The flaw, tracked as CVE-2026-41940, let a network-based attacker gain root-level access to a server without a valid username, password, [&hellip;]","og_url":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/","og_site_name":"Web Hosting News","article_published_time":"2026-05-27T03:11:20+00:00","author":"Justine Juyad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Justine Juyad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/","url":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/","name":"InMotion Hosting blocks critical cPanel flaw across 144K clients - Web Hosting News","isPartOf":{"@id":"https:\/\/hostingdiscussion.com\/news\/#website"},"datePublished":"2026-05-27T03:11:20+00:00","dateModified":"2026-05-27T03:11:20+00:00","author":{"@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3"},"breadcrumb":{"@id":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hostingdiscussion.com\/news\/inmotion-hosting-blocks-critical-cpanel-flaw-across-144k-clients\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hostingdiscussion.com\/news\/"},{"@type":"ListItem","position":2,"name":"InMotion Hosting blocks critical cPanel flaw across 144K clients"}]},{"@type":"WebSite","@id":"https:\/\/hostingdiscussion.com\/news\/#website","url":"https:\/\/hostingdiscussion.com\/news\/","name":"Web Hosting News","description":"Cloud and web hosting industry daily news","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hostingdiscussion.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/3a1732732b90f8c57c2a0ec68d3c49e3","name":"Justine Juyad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hostingdiscussion.com\/news\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96df33d01870f85226adf8492251fbefe00bc349b10bb7679b094f3fa086999c?s=96&d=mm&r=g","caption":"Justine Juyad"},"description":"HostingDiscussion.com senior reporter","sameAs":["https:\/\/hostingdiscussion.com\/news\/"],"url":"https:\/\/hostingdiscussion.com\/news\/author\/justine-juyad\/"}]}},"views":152,"_links":{"self":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/9810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/users\/20624"}],"replies":[{"embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/comments?post=9810"}],"version-history":[{"count":1,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/9810\/revisions"}],"predecessor-version":[{"id":9811,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/posts\/9810\/revisions\/9811"}],"wp:attachment":[{"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/media?parent=9810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/categories?post=9810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hostingdiscussion.com\/news\/wp-json\/wp\/v2\/tags?post=9810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}