Security Boulevard

Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM

What is CVE-2026-41940? CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM, including DNSOnly, in versions after 11.40. The flaw, discovered by WatchTowr Labs, ...
Security Boulevard

cPanel and WHM Emergency Update Fixes Critical Authentication Bypass Bug

cPanel and WebHost Manager have received an emergency security update addressing a critical authentication bypass vulnerability tracked as CVE-2026-41940, with a CVSS score of 9.8. The flaw affects ...
Bleeping Computer

cPanel, WHM emergency update fixes critical auth bypass bug

A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the control panel without authentication. The ...
GitHub

CVE-2026-41940 Exploit PoC – cPanel & WHM Authentication Bypass

CVE-2026-41940 is a CRLF injection vulnerability in cPanel & WHM (versions < 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, 11.136.0.5).