Critical SEVERITY — Vulnerability

CVE-2026-41940 — cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthe

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Platform
cPanel & WHM
CVE Record
CVE-2026-41940
CVSS Score
9.3/10
Published
29 April 2026
Views
4
Primary source: Review the official advisory at nvd.nist.gov Kaynağa Git

Özet

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Değerlendirme

  • CVE: CVE-2026-41940
  • CVSS taban puanı: 9.3
  • Vektör: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • Kaynak: NVD kaydı

Referanslar

Aksiyon

  • Etkilenen sistemleri envanterden doğrulayın
  • Üretici yamasını bakım penceresinde uygulayın
  • Yama uygulanana kadar erişimi ağ katmanında kısıtlayın
cpanel * whm * wp squared *

cPanel & WHM — Related Advisories

VIEW ALL →
cPanel & WHM 11 Dec 2025
High · 8.8

CVE-2025-66429 — An issue was discovered in cPanel 110 through 132.

An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user.

CVE-2025-66429 Vulnerability 3