A critical vulnerability in cPanel and WHM has been discovered, allowing attackers to bypass authentication and gain root access to managed servers. This bug is likely being exploited as a zero-day, meaning attackers are leveraging it before patches were available, putting defenders at a disadvantage. The vulnerability affects millions of domains, and emergency patches have been released to mitigate the issue. The exploit enables unauthorized access to sensitive areas of the system, potentially leading to severe consequences. Technical details of the vulnerability, including its CVE number, are not publicly disclosed, but the severity of the issue has prompted an urgent response from the vendor. The fact that this vulnerability is being exploited before patches existed1 highlights the importance of prompt patch management and ongoing vigilance in maintaining server security. This matters to practitioners because it underscores the need for swift action in applying patches to prevent potential root-level breaches.