CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-04-29
cPanel and WHM Authentication Bypass Vulnerability (CVE-2026-41940) Security Advisory
[Affected Scope] cPanel and WHM versions after 11.40 (prior to the April 28, 2026 security update)
[Impact] Unauthenticated remote attackers can bypass the login flow to gain unauthorized administrative access to the control panel, leading to complete server compromise
[Mitigation] Immediately apply the latest security patches provided by the vendor, and restrict external access to management ports (2082, 2083, 2086, 2087) until patched