A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the control panel without authentication. [...]
cPanel, WHM emergency update fixes critical auth bypass bug
Summary + source link. No paywalls, no tracking.