cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

The feed is a security roundup covering multiple high-impact vulnerabilities, active exploits, malware families, and supply-chain incidents. Notable items include cPanel/WHM fixes (privilege escalation/code execution), PAN-OS CVE-2026-0300 (critical RCE under active exploitation), Apache HTTP/2 CVE-2026-23918 (double-free, possible RCE), Ivanti EPMM CVE-2026-6973 (RCE with limited exploitation), a new Linux local privilege escalation (“Dirty Frag”), and a PAM-based backdoor (PamDOORa) targeting SSH credentials. The bulletin also describes emerging malware and campaigns — TCLBANKER banking tro­