Automated-scanner-CVE-2026-41940

CPANEL CVE EXPLOIT English | فارسی Persian ██████╗██████╗ █████╗ ███╗ ██╗███████╗██╗ ██╔════╝██╔══██╗██╔══██╗████╗ ██║██╔════╝██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██║╚██╗██║██╔══╝ ██║ ╚██████╗██║ ██║ ██║██║ ╚████║███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═╝╚═╝...

CVE-2026-41940

CVE-2026-41940 - cPanel/WHM Authentication Bypass This repository contains an English, redacted write-up and a Go-based verification tool for CVE-2026-41940, a cPanel/WHM authentication bypass caused by CRLF injection in Basic Authentication handling. All live target lists, asset exports, scan...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py

cve-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator cPanel/WHM Authentication Bypass Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if cPanel/WHM is vulnerable to a recent authentication bypass. Detection in Action Test against ...

cpanel2shell-scanner

cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...

cve-2026-41940-PoC-Linux

CVE-2026-41940 PoC - Linux/Termux Compatible Linux dan Termux compatible version dari CVE-2026-41940 cPanel/WHM authentication bypass exploit. Instalasi Untuk Termux Android: pkg update && pkg upgrade pkg install python3 python3-pip git git clone...

CVE-2026-67401-cPanel-EmailTrack-SQLi

CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root RCE IOC Scanner, Mitigation Tool & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, Track Delivery SQL injection...

CVE-2026-67401

CVE-2026-67401 SQL injection in cPanel EmailTrack. Authenticated cPanel user with mail privileges writes arbitrary files as root via SQLite ATTACH DATABASE. One request to root. Haven't tested on a real target, code is only put together from public information and basic diff'ing. Do your due...

CVE-2026-41940

CVE-2026-41940 | cPanel/WHM Authentication Bypass Detection ╔════════════════════════════════════════════════════════════════════════════╗ ║ cPanel/WHM Authentication Bypass - Detection Artifact Generator ║ ╚════════════════════════════════════════════════════════════════════════════╝ 📌 Descripti...

CVE-2026-41940-AuthBypass-Detector

CVE-2026-41940 Detection & Verification Overview This tool detects cPanel/WHM instances vulnerable to CVE-2026-41940 , a critical authentication bypass discovered by watchTowr Labs. The vulnerability allows an unauthenticated attacker to gain root access to WHM via a CRLF injection in the session...

CVE-2026-41940-cPanel-WHM-Verification-Tool

CVE-2026-41940 cPanel & WHM Verification Tool This repository contains a Python verification script for CVE-2026-41940, a critical authentication bypass vulnerability disclosed in cPanel & WHM. This project is intended for authorized defensive validation only. It is not intended for exploit...

cve-checker-2026

CVE Checker 2026 Multi-OS vulnerability scanner for: CVE-2026-31431 — Linux kernel crypto/algifaead flaw CVE-2026-41940 — cPanel & WHM authentication bypass CVSS 9.8 Supported Operating Systems Family| Distributions ---|--- Debian| Ubuntu, Debian, Linux Mint, Pop!OS RHEL| RHEL, CentOS, AlmaLinux,...

cPanel-CVE-2026-41940-Scanner

cPanel-CVE-2026-41940-Scanner This high-performance security tool is designed to identify and exploit CVE-2026-41940 , a critical CRLF injection vulnerability in cPanel & WHM. It automates the entire process from Shodan discovery to administrative token creation. Key Features Automated Shodan...

2026-41940-poc

CVE-2026-41940 - cPanel/WHM Authentication Bypass CVSS 9.8 | Unauthenticated root access via CRLF injection Usage python3 cp.py -t cpanel.target.com detect python3 cp.py -t cpanel.target.com --exploit exploit @nickpaulsec...

cve-2026-41940-scanner

🔒 LinkSecure - cPanel Security Scanner Enterprise-grade vulnerability detection for cPanel & WHM infrastructure Features • Installation • Usage • Legal • Examples 📋 Table of Contents About Vulnerability Overview Features Installation Usage Examples Understanding Results Remediation Legal Disclaim...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: cPanel/WHM Authentication Bypass Analysis Vulnerability Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM affecting all currently supported versions. It allows an unauthenticated attacker to bypass authentication and gain root-level access W...

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start python3 pocCVE-2026-41940.py -h Usage examples Scan one host python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list Run a shell command python3...

CVE-2026-41940

The recent CVE-2026-41940 vulnerability has raised great concern among server administrators using cPanel/WHM. It is a critical flaw that can allow authentication bypass, enabling unauthorized access to the administrative panel without valid credentials. Considering that WHM is the main control...

cPanel-WHM-CVE-2026-41940-AuthBypass

CVE-2026-41940 cPanel & WHM Authentication Bypass Scanner ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational purposes only. Users must comply with local laws and regulations; scanning unauthorized systems is strictly prohibited. The author is not responsible...

sorry-ransomware-analysis

Sorry Ransomware Analysis CVE-2026-41940 cPanel Campaign Public IOC pack, YARA rules, forensic scripts and analysis methodology for the "Sorry" ransomware .sorry extension family that emerged in late April 2026, spread via the cPanel/WHM authentication bypass CVE-2026-41940. ⚠️ Files encrypted by...