thecybersecguru.com

cPanel/WHM Auth Bypass PoC Reportedly Circulating. Web Devs on Shared/VPS Hosting Should Check Their Servers (opens in new tab)

Discussed on r/homelab, r/sysadmin, and r/webdev

A critical authentication bypass (CVE-2026-41940) in cPanel & WHM allows unauthenticated root access. PoC is circulating in dark web forums

Read the original article

Sign in to keep reading the full article.