cPanel CVE202641940 Under Active Exploitation to Deploy Filemanager Backdoor

A threat actor named MrRot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments The attack exploits CVE202641940 a vulnerability impacting cPanel and WebHost Manager WHM that could result in an authentication bypass and allow remote attackers to gain elevated control of the control