Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-41940

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-41940.

Coverage Span: 2026-05-01
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-41940 cPanel & WHM Authentication Bypass Overview and Takeaways

CVE-2026-41940 (CVSS 9.8) is an authentication bypass in cPanel & WHM and WP Squared that injects values into server-side session files for root-level access, and was exploited before the patch.