Exploit for CVE-2026-41940

kitploit · 2026-09-03

Description

Vulnerability in tools component.

Entry point

Parameteruser · request body

Path/login

Unauthenticated session mint via POST /login using Basic-auth-like payload.

Affected Cpanel versions

Cpanel< 86.0.41, 110.0.97, 118.0.63, 124.0.35, 126.0.54, 130.0.19, 132.0.29, 134.0.20, 136.0.5

All known vulnerabilities by product

Wp Squared Cpanel & Whm

CVSS 9.8 for CVE-2026-41940

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:NONE

User Interaction:NONE

CVE Information

CVE-2026-41940

Exploit Details

Modified:2026-09-03 01:13

Last Seen:2026-09-03 19:33

Reporter:KitPloit

Other exploits for CVE-2026-41940

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

2026-09-03 KitPloitKITPLOIT

cpanel-sessionscribe

2026-09-03 KitPloitKITPLOIT

cpanel-cve-2026-41940

2026-09-03 KitPloitKITPLOIT

cPanelSniper

2026-09-03 KitPloitKITPLOIT

cPanelSniper

2026-09-03 KitPloitKITPLOIT

CVE-2026-41940-Security-Patch

2026-09-03 KitPloitKITPLOIT

poc-cpanel-cve-2026-41940

2026-09-03 KitPloitKITPLOIT

watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py

2026-09-03 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-WESUILIYE-CVE-2026-41940
#CVE-2026-41940

Exploit Code

Share

Share on social media: