Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-41940— WebPros cPanel and WHM Authentication Bypass via Login Flow

Quick assessment

Affected

WebPros cPanel

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

cPanel是美国cPanel公司的一套基于Web的自动化主机托管平台。该平台主要用于自动化管理网站和服务器。 cPanel存在访问控制错误漏洞，该漏洞源于登录流程中存在身份验证绕过问题，可能导致未经身份验证的远程攻击者未经授权访问控制面板。

CVSS 9.8 · Critical KEV · Ransomware EPSS 98.53% · P100 Updated Oct 01, 2026

Public Exploits 3

ExploitDB · 1 EDB-52574 [webapps]

Metasploit · 1 cpanel_whm_auth_bypass_rce.rb [exploit]

Nuclei · 1 CVE-2026-41940.yaml [template]

In-the-Wild Activity Observed github_trending · high cisa_kev · confirmed

Possible ATT&CK Techniques 2 AI

T1078 · Valid Accounts T1190 · Exploit Public-Facing Application

Affected Version Matrix 23

Vendor	Product	Version Range	Status
WebPros	cPanel	`11.40.0.0< 11.86.0.41`	affected
		`11.88.0.0< 11.94.0.28`	affected
		`11.96.0.0< 11.102.0.39`	affected
		`11.104.0.0< 11.110.0.97`	affected
		`11.112.0.0< 11.118.0.63`	affected
		`11.120.0.0< 11.124.0.35`	affected
		`11.126.0.0< 11.126.0.54`	affected
		`11.128.0.0< 11.130.0.19`	affected
… +3 more rows
WebPros	WHM	`11.40.0.0< 11.86.0.41`	affected
		`11.88.0.0< 11.94.0.28`	affected
		`11.96.0.0< 11.102.0.39`	affected
		`11.104.0.0< 11.110.0.97`	affected
		`11.112.0.0< 11.118.0.63`	affected
		`11.120.0.0< 11.124.0.35`	affected
		`11.126.0.0< 11.126.0.54`	affected
		`11.128.0.0< 11.130.0.19`	affected
… +3 more rows
WebPros	WP Squared	`< 11.136.1.7`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-41940

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

WebPros cPanel and WHM Authentication Bypass via Login Flow

Source: CVE Program / CVE List V5

Vulnerability Description

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

关键功能的认证机制缺失

Source: CVE Program / CVE List V5

Vulnerability Title

cPanel 访问控制错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE
WebPros	cPanel	11.40.0.0 ~ 11.86.0.41	-
WebPros	WP Squared	0 ~ 11.136.1.7	-
WebPros	WHM	11.40.0.0 ~ 11.86.0.41	-

II. Public POCs for CVE-2026-41940

#	POC Description	Source Link	Shenlong Link
1	cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml	POC Details

AI-Generated POC Premium

default-local-qwen3.6 · 15450 chars

Pro+ exclusive includes:

Vulnerability reproduction recording (real sandbox build + trigger, exclusive)

In-depth vulnerability mechanism

Trigger conditions & impact

Full executable POC code

Exploit chain & mitigation

POC zip download

100+ AI POC generations per month

Upgrade to Pro+ to unlock Limited ¥499/month ¥599 Sign up first

III. Intelligence Information for CVE-2026-41940

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-41940 (1)

🔗 cPanel & WHM Authentication Bypass via Login Flow | Advisories | VulnCheck Read full article third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-41940

IV. Related Vulnerabilities

Same product: cPanel

Same vendor: WebPros

Same weakness: CWE-306

V. Comments for CVE-2026-41940

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-41940— WebPros cPanel and WHM Authentication Bypass via Login Flow

Quick assessment

Public Exploits 3

Possible ATT&CK Techniques 2 AI

Affected Version Matrix 23

I. Basic Information for CVE-2026-41940

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2026-41940

III. Intelligence Information for CVE-2026-41940

Vendor Advisories for CVE-2026-41940 (1)

IV. Related Vulnerabilities

V. Comments for CVE-2026-41940

Leave a comment