Notes from the team

# goPanel Blog

Architecture deep-dives, security write-ups, and notes on running Linux servers from a Mac or iPhone.

2026-05-06 · Architecture, Security

## [Why goPanel doesn’t have a CVE-2026-41940 — the case for SSH-only server management](https://gopanel.io/blog/why-gopanel-has-no-cve-2026-41940.html)

The same shape of CVE keeps landing against hosted control panels: auth bypass, root daemon, public HTTP. Here’s why an SSH-only architecture removes the whole class.