Sploitus

CVE-2026-41940

71 known exploits for CVE-2026-41940

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Affected products
Wp Squared, Cpanel & Whm
Cpanel
< 86.0.41, 110.0.97, 118.0.63, 124.0.35, 126.0.54, 130.0.19, 132.0.29, 134.0.20, 136.0.5
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
97.9% (100th percentile)
Weakness
CWE-306
NVD status
Analyzed
Published
2026-04-29
CVE-2026-41940 at NVD
Authoritative description, scoring and affected products

71 known exploits for CVE-2026-41940

Proof-of-concept code and exploit modules indexed by Sploitus

cve-2026-poc-collection
2026-08-06 TreasureBoy99GITHUB
cve-2026-poc-collection
2026-08-03 TreasureBoy520GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-07-26 CerberusMrXiGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-07-26 CerberusMrXiGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-07-24 AnotherSecGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-07-23 razureinkGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-07-23 dann3xplo1tGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-07-20 soverinegGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-06-28 aquaceGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-06-16 clsmightGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-06-06 asdasddqwdq29-a11yGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-06-05 0xQx64azexaEGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-27 willygailoGITHUB
cPanel - CRLF Injection
2026-05-26 nu11secur1tyEXPLOITDB
indo-cpanel-exploit
2026-05-26 dikurdikurGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-24 sardine-webGITHUB
cve-2026-poc-collection
2026-05-21 XZ1r0GITHUB
cPanel/WHM CRLF Injection Authentication Bypass RCE
2026-05-18 Sina Kheirkhah, Adam Kues, Shubham Shah, Crypto-CatMETASPLOITRuby
📄 CPanel/WHM CRLF Injection / Authentication Bypass / Remote Code Execution
2026-05-18 Crypto-Cat, Shubham Shah, Sina Kheirkhah, Adam KuesPACKETSTORMRuby
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-12 tc4dyGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-11 anach-aiGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-11 zycoder0dayGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-10 44pieGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-08 branixsolutionsGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-07 thekawixGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-06 bughunt4meGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-06 OhmGunGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-06 Defacto-ridgepole254GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-06 murrezGITHUB
cPanelSniper-
2026-05-05 midox008GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-05 RichflexpixGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-05 bughunt4meGITHUB
📄 cPanel Authentication Manipulation / Session Injection
2026-05-04 indoushkaPACKETSTORM
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-04 habibkaratasGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-04 sercanokurGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-04 nickpaulsecGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-04 iSee857GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-04 itsismarcosGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-03 imbas007GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-03 cy3ermGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-02 dennisecGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-02 3tternpGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-02 ThatNotEasyGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-02 linko-ihebGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-02 IshanoshadaGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-02 MrOplusGITHUB
📄 cPanel / WHM Authentication Bypass / CRLF Injection
2026-05-01 nu11secur1tyPACKETSTORM
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 george1-adelGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 senyx122GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 merdwGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 Rosemary1337GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 mahfuzrehamGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 unteikyouGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 NULL200OKGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 ynsmroztasGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 Christian93111GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 kmaruthisrikarGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 Jenderal92GITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 XsanFlipGITHUB
Exploit for Missing Authentication for Critical Function in Cpanel
2026-05-01 0xF55GITHUB
cve-checker-2026
2026-05-01 sebinxaviGITHUB
Exploit for CVE-2026-41940
2026-04-30 yaunskyGITHUB
Exploit for CVE-2026-41940
2026-04-30 KagantuaGITHUB
Exploit for CVE-2026-41940
2026-04-30 WesuiliyeGITHUB
Exploit for CVE-2026-41940
2026-04-30 assetnoteGITHUB
Exploit for CVE-2026-41940
2026-04-30 rfxnGITHUB
Exploit for CVE-2026-41940
2026-04-30 0xabdoulayeGITHUB
Exploit for CVE-2026-41940
2026-04-30 shahidmallaofficialGITHUB
Exploit for CVE-2026-41940
2026-04-29 SachinartGITHUB
watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py
2026-04-29 watchtowrlabsGITHUB
Exploit for CVE-2026-41940
2026-04-29 debugactiveprocessGITHUB