All Topics

Technology

Art

Critical Authentication Bypass Vulnerability Discovered in cPanel & WHM (CVE-2026-41940)

Sina Kheirkhah (@SinSinology)

1mo ago· 19 min readenInsight

100/100

Golden Brown

Bagelometer↗

Pure flour-power. Hearty enough to carry you through lunch.

Score100TypeanalysisSentimentnegative

Summary

watchTowr Labs reports on a critical authentication bypass vulnerability (CVE-2026-41940) in cPanel & WHM, a widely-used web hosting control panel. The article details the technical exploitation of the vulnerability, which allows attackers to bypass authentication mechanisms and gain unauthorized access to cPanel and WHM systems. The research demonstrates the severity of the flaw and provides analysis of the attack vector, potential impact on hosting environments, and mitigation strategies.

Key quotes

· 3 pulled

Hello! Yes, it's all a disaster again!

As with all watchTowr Labs research, this didn't start with a blog post - but is the end result of a coordinated capability that enables watchTowr clients to rapidly react to, and autonomously mitigate, emerging threats.

When exploitation happens in hours, watchTowr delivers what no one else can: time to respond.

Snippet from the RSS feed

Hello! Yes, it's all a disaster again! Let's get this party started: 0:00 /0:12 1× No comments today, so imagine this: * We wrote something that we find very funny, * Nobody else gets it, * But everyone hum

You might also wanna read

CISA Adds Actively Exploited LiteSpeed cPanel Privilege Escalation Vulnerability to KEV Catalog

CISA has added one new vulnerability (CVE-2026-48172) to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability affects the Li

cisa.gov·5d ago

CVE-2026-0257: PAN-OS GlobalProtect Authentication Bypass Under Active Exploitation

CVE-2026-0257 is a medium-severity (CVSS 7.8) authentication bypass vulnerability affecting Palo Alto Networks PAN-OS and Prisma Access Glob

briefly.co·2d ago

Critical Authentication Bypass Vulnerabilities Found in Casdoor IAM Platform (CERT/CC VU#780781)

Casdoor versions 2.362.0 and earlier contain critical identity and access management vulnerabilities in SAML processing, account binding, an

kb.cert.org·1d ago

CISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog

CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS

cisa.gov·5h ago