CVE-2026-41940

🗓️ 05 Sep 2026 20:31:39Reported by KitPloitType

kitploit🔗 kitploit.com👁 5 Views

Unauthenticated root auth bypass in cPanel & WHM via CRLF injection in session files.

Reporter	Title	Published	Views	Family All 183
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	1 May 202616:27	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	13 Aug 202616:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	6 Jun 202612:49	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	27 May 202600:16	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	8 May 202614:05	–	githubexploit
GithubExploit	indo-cpanel-exploit	26 May 202619:59	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	5 May 202623:39	–	githubexploit
GithubExploit	Exploit for CVE-2026-41940	30 Apr 202617:08	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Cpanel	23 Jul 202615:42	–	githubexploit
GithubExploit	Exploit for CVE-2026-41940	30 Apr 202608:11	–	githubexploit

Source	Link
github	www.github.com/0xgh057r3c0n/cve-2026-41940/blob/main/LICENSE
github	www.github.com/0xgh057r3c0n

05 Sep 2026 20:31Current

8.5High risk

Vulners AI Score8.5

CVSS 49.3

CVSS 3.19.8

EPSS0.98527

SSVC

cPanel WHM auth bypass CRLF injection session file unauthenticated root