---
id: 7684
title: "CVE-2026-41940 cPanel & WHM Authentication Bypass Overview and Takeaways"
cve: CVE-2026-41940
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/critical-vulnerability/cve-2026-41940-cpanel-whm-authentication-bypass-overview-and-takeaways/"
published_at: "2026-05-01T00:00:00Z"
tags: ["hosting", "in-the-wild", "patch-now", "auth-bypass", "cpanel", "cve-2026-41940", "wp-squared"]
phying_url: "https://phying.com/item/7684"
lang: en
---

# CVE-2026-41940 cPanel & WHM Authentication Bypass Overview and Takeaways

## Summary

CVE-2026-41940 (CVSS 9.8) is an authentication bypass in cPanel & WHM and WP Squared that injects values into server-side session files for root-level access, and was exploited before the patch.

## Intelligence Metadata

- **Sources:** netspi.com
- **CVE:** CVE-2026-41940
- **Published:** 2026-05-01T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/critical-vulnerability/cve-2026-41940-cpanel-whm-authentication-bypass-overview-and-takeaways/
- **Phying News:** https://phying.com/item/7684