511 matches found
Exploit for Missing Authentication for Critical Function in Cpanel
markdown CVE-2026-41940 - WHM/cPanel Authentication Bypass...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940: cPanel/WHM Authentication Bypass Disclaim...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanelSniper CVE-2026-41940 — c...
Actively exploited cPanel bug exposes millions of websites to takeover
Security researchers are warning about a newly discovered vulnerability in the widely used web server management software cPanel and WebHost Manager WHM. This is a critical, actively exploited authentication-bypass bug in cPanel/WHM that lets attackers gain administrative access to the interface...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 Detection & Verification !License: MIThttp...
Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM
What is CVE-2026-41940? CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM, including DNSOnly, in versions after 11.40. The flaw, discovered by WatchTowr Labs, exists in the login flow and allows unauthenticated remote attackers to gain unauthorized access to...
Exploit for CVE-2026-41940
SessionScribe - CVE-2026-41940 Detection, mitigation, and rev...
Exploit for CVE-2026-41940
cPanel/WHM Auth Bypass Scanner & Exploit Tool A Go command-li...
CVE-2026-41940: cPanel & WHM Authentication Bypass
Overview On April 28, 2026, cPanel issued a security update to fix a critical vulnerability affecting the cPanel & WHM and WP Squared products. In the cPanel release notes, the bug was described as "an issue with session loading and saving." CVE-2026-41940, the identifier subsequently assigned on...
Exploit for CVE-2026-41940
Usage python 0day.py -f test.txt --external-only --show...
PT-2026-40436
Name of the Vulnerable Software and Affected Versions cPanel affected versions not specified Description Incorrect privileges management and insufficient path filtering in the cpdavd service allow a remote, unauthenticated attacker to read arbitrary files on the server as root. This is achieved...
CVE-2016-10853
cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...
CVE-2017-18464
cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...
CVE-2017-18419
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
CVE-2019-20497
cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration SEC-533...
CVE-2024-34015
Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892...
EUVD-2018-13441
Malware in sbrugna...
EUVD-2017-9580
Malware in sbrugna...