cveboard RSS feed

CVE-2026-41940

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

WebPros cPanel and WHM Authentication Bypass via Login Flow

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

cPanel

Vendor
WebPros
Product
cPanel
Platforms
Unknown
Default status
affected
cPanel · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
11.40.0.0affectedcustom11.86.0.41UnavailableNone listed
11.88.0.0affectedcustom11.94.0.28UnavailableNone listed
11.96.0.0affectedcustom11.102.0.39UnavailableNone listed
11.104.0.0affectedcustom11.110.0.97UnavailableNone listed
11.112.0.0affectedcustom11.118.0.63UnavailableNone listed
11.120.0.0affectedcustom11.124.0.35UnavailableNone listed
11.126.0.0affectedcustom11.126.0.54UnavailableNone listed
11.128.0.0affectedcustom11.130.0.19UnavailableNone listed
11.132.0.0affectedcustom11.132.0.29UnavailableNone listed
11.134.0.0affectedcustom11.134.0.20UnavailableNone listed
11.136.0.0affectedcustom11.136.0.5UnavailableNone listed

WP Squared

Vendor
WebPros
Product
WP Squared
Platforms
Unknown
Default status
unaffected
WP Squared · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedcustom11.136.1.7UnavailableNone listed

WHM

Vendor
WebPros
Product
WHM
Platforms
Unknown
Default status
affected
WHM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
11.40.0.0affectedcustom11.86.0.41UnavailableNone listed
11.88.0.0affectedcustom11.94.0.28UnavailableNone listed
11.96.0.0affectedcustom11.102.0.39UnavailableNone listed
11.104.0.0affectedcustom11.110.0.97UnavailableNone listed
11.112.0.0affectedcustom11.118.0.63UnavailableNone listed
11.120.0.0affectedcustom11.124.0.35UnavailableNone listed
11.126.0.0affectedcustom11.126.0.54UnavailableNone listed
11.128.0.0affectedcustom11.130.0.19UnavailableNone listed
11.132.0.0affectedcustom11.132.0.29UnavailableNone listed
11.134.0.0affectedcustom11.134.0.20UnavailableNone listed
11.136.0.0affectedcustom11.136.0.5UnavailableNone listed