Security News
BKNS security information hub — important CVE alerts, vulnerability disclosure, hardening guides for hosting + VPS customers.
Benefits
Why choose BKNS?
Important CVE Alerts
We track CVEs rated CVSS ≥ 7.0 affecting Linux, Windows, common control panels and CMS platforms. Detailed remediation guides for hosting and VPS customers.
Vulnerability disclosure
BKNS receives and coordinates on security vulnerability reports from the research community.
Periodic Security Reports
Quarterly security report: incident summary, patch summary and the Vietnamese threat landscape. Published since Q1/2024.
Hardening Guides
A knowledge base of 200+ guides: SSH hardening, Fail2ban, ModSecurity, WordPress security and DDoS mitigation. Updated weekly.
Recent security advisories
CVE-2026-41940 — cPanel & WHM Authentication Bypass
- Publication date: April 29, 2026 per NVD; WebPros released a security update for cPanel & WHM on April 28, 2026.
- Official source: NVD — CVE-2026-41940 — cPanel security advisory (April 28, 2026).
- Severity: CVSS 9.8/10 (Critical), CVSS version 3.1 — vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Listed in the CISA Known Exploited Vulnerabilities catalog; per BleepingComputer and watchTowr Labs, exploited widely in the wild. - BKNS products that may be affected: VPS / Cloud Server / dedicated servers where the customer self-manages a cPanel & WHM install — including customers who purchased a cPanel license through BKNS and run it on their own server — versions from 11.40 up to the fixed build per branch (WP Squared before 11.136.1.7); see the vendor advisory above for the full per-branch version list.
- Recommendation for customers: Update cPanel & WHM to the latest version as soon as possible via
WHM → cPanel → Upgrade to Latest Version(if the server is pinned to an end-of-life branch — not listed in the vendor's fixed builds — or has updates set to "Never Update", switch it first inWHM → Update Preferences) or by running/scripts/upcp --forceover SSH. If you cannot update right away, restrict the cPanel/WHM/Webmail service ports (2082/2083, 2086/2087, 2095/2096) to trusted IPs only. If you suspect compromise: review WHM/cPanel access logs, rotate root/reseller/cPanel passwords and API tokens, and check the vendor advisory's indicators of compromise.
Report a Security Vulnerability to BKNS
If you discover a security vulnerability in a BKNS service, please report it by email: security@bkns.vn.
Subscribe to Security Alerts
BKNS security alert mailing list — sent only for CVE ≥ 7.0 affecting our infrastructure or a widely used service. Average frequency: 2-4 emails/month.
Subscribe via Settings → Security Alerts in my.bkns.vn, or send a request to security-news@bkns.vn.
Subscribe to BKNS Security Alerts
2-4 emails per month, only for CVEs rated ≥ 7.0 affecting widely used services. No spam.