CVE-2026-41940 PoC — cPanel和WHM登录流程绕过漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml

Associated Vulnerability

Title:cPanel和WHM登录流程绕过漏洞 (CVE-2026-41940)
Description:cPanel 和 WHM 在 11.110.0.97、11.118.0.63、11.126.0.54、11.132.0.29、11.134.0.20 以及 11.136.0.5 之前的版本中，存在登录流程的认证绕过漏洞，可导致未授权的攻击者获得对控制面板的未经授权的访问权限。

Description

cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

File Snapshot


 id: CVE-2026-41940

info:
  name: cPanel & WHM - Authentication Bypass via Session-File CRLF Injecti

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!