cPanel is a web hosting control panel that is being targeted in a campaign using compromised GitHub repositories and GitHub Actions runners. Attackers exploit CVE-2026-41940 to bypass authentication and steal credentials, configuration files, and other sensitive data.