Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE4 IOCs
Multiple cPanel & WHM Vulnerabilities Enable Root Code Execution and Admin Session Hijacking
Diamond Model
Indicators of Compromise
Indicators of Compromise4
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-93697 exploitintel-blogmalware | Medium | 51 | Oct 3, 26 |
| CVE | CVE-2026-93698 exploitintel-blogmalware | Medium | 51 | Oct 3, 26 |
| CVE | CVE-2026-93029 exploitintel-blogvulnerability | Medium | 51 | Oct 3, 26 |
| CVE | CVE-2026-41940 botnetexploitintel-blog | High | 69 | Jun 3, 26 |
IOC Relationship Graph
IOC Relationship Graph4 total IOCs
CVE