Exploit for Missing Authentication for Critical Function in Cpanel CVE-2026-41940

Name: Exploit for Missing Authentication for Critical Function in Cpanel CVE-2026-41940
Rating: 5 (102 reviews)

2026-05-02 | CVSS 9.8

## https://sploitus.com/exploit?id=EDAA1B75-7268-5D00-8065-04ECF551C933
Based on Watch Tower POC , 
Supports direct shell access via websocket , and adding root api keys for persistance.