CVE-2026-41940: fallo crítico en WebPros cPanel
WebPros cPanel and WHM Authentication Bypass via Login Flow
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 9.3epss 99%
de la publicación al armael mismo día
Publicada en NVD29 abr
1ª PoC29 abr
metasploit28 abr
CISA KEV+1d
Acción exigida por CISAplazo federal: 2026-05-03
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
En resumen
cPanel y WHM tienen una falla que permite que atacantes inicien sesión sin credenciales válidas, obteniendo control total sobre cuentas de alojamiento y servidores.
Detalle técnico
Un desvío de autenticación en el flujo de inicio de sesión de cPanel/WHM (CWE-306) permite que atacantes remotos no autenticados eludan la validación de credenciales y obtengan acceso no autorizado. La vulnerabilidad afecta versiones posteriores a 11.40 y resulta en compromiso completo del panel de control.
Resumen generado y traducido por IA a partir de la descripción oficial.
El análisis completo de esta CVE está disponible en portugués →
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
PoCs públicas encontradas — 136
exploitdbwww.exploit-db.com/exploits/52574no verificadogithubgithub.com/sakidekin/CVE-2026-41940-PoC★ 533githubgithub.com/lanicer/cve-2026-41940-PoC★ 532githubgithub.com/ctdal/cve-2026-41940-PoC★ 526githubgithub.com/ynsmroztas/cPanelSniper★ 511githubgithub.com/soverineg/cve-2026-41940-PoC★ 313githubgithub.com/pemarine/cve-2026-41940-PoC★ 272githubgithub.com/aquace/CVE-2026-41940-PoC★ 192githubgithub.com/assetnote/cpanel2shell-scanner★ 93githubgithub.com/XsanFlip/poc-cpanel-cve-2026-41940★ 63githubgithub.com/clsmight/CVE-2026-41940-PoC★ 62githubgithub.com/ZeroDayEvil/CVE-2026-41940-PoC★ 28githubgithub.com/adriyansyah-mf/cve-2026-41940-poc★ 28githubgithub.com/Sachinart/CVE-2026-41940-cpanel-0day★ 26githubgithub.com/bughunt4me/cpanelCVE-2026-41940★ 13githubgithub.com/ilmndwntr/CVE-2026-41940-MASS-EXPLOIT★ 13githubgithub.com/rfxn/cpanel-sessionscribe★ 13githubgithub.com/realawaisakbar/CVE-2026-41940-Exploit-PoC★ 12githubgithub.com/tc4dy/CVE-2026-41940-PoC-Exploit★ 12githubgithub.com/Kagantua/cPanelWHM-AuthBypass★ 10githubgithub.com/Kill1234545/CVE-2026-41940★ 10githubgithub.com/Christian93111/CVE-2026-41940★ 10githubgithub.com/0xYuR1/CVE-2026-41940★ 9githubgithub.com/murrez/CVE-2026-41940★ 8githubgithub.com/habibkaratas/sorry-ransomware-analysis★ 6githubgithub.com/debugactiveprocess/cPanel-WHM-AuthBypass-Session-Checker★ 6githubgithub.com/senyx122/CVE-2026-41940★ 6githubgithub.com/shahidmallaofficial/cpanel-cve-2026-41940-fix★ 4githubgithub.com/Jenderal92/CVE-2026-41940★ 4githubgithub.com/NULL200OK/cve-2026-41940-tool★ 3githubgithub.com/mahfuzreham/cpanel-cve-2026-41940★ 3githubgithub.com/44pie/cpsniper★ 2githubgithub.com/Andrei-Dr/cpanel-cve-2026-41940-ioc★ 2githubgithub.com/willygailo/CVE-2026-41940-Linux★ 2githubgithub.com/CerberusMrXi/cPanel-WHM-CVE-2026-41940-auth-bypass-exploit★ 2githubgithub.com/merdw/cPanel-CVE-2026-41940-Scanner★ 2githubgithub.com/Ishanoshada/CVE-2026-41940-Exploit-PoC★ 2githubgithub.com/sardine-web/Automated-scanner-CVE-2026-41940★ 2githubgithub.com/MrOplus/CVE-2026-41940★ 1githubgithub.com/AmirrezaMarzban/portscan-CVE-2026-41940★ 1githubgithub.com/0xBlackash/CVE-2026-41940★ 1githubgithub.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC★ 1githubgithub.com/Lutfifakee-Project/CVE-2026-41940★ 1githubgithub.com/0xgh057r3c0n/CVE-2026-41940★ 1githubgithub.com/kmaruthisrikar/CVE-2026-41940-cPanel-Auth-Bypass-Exploit★ 1githubgithub.com/zedxod/CVE-2026-41940-POC★ 1githubgithub.com/george1-adel/CVE-2026-41940_exploit★ 1githubgithub.com/linko-iheb/cve-2026-41940-scanner★ 1githubgithub.com/nickpaulsec/2026-41940-poc★ 1githubgithub.com/razureink/cve-2026-41940-cpanel_authbypass_reproduction★ 1githubgithub.com/thekawix/CVE-2026-41940★ 1githubgithub.com/ashrafzaryouh/CVE-2026-41940★ 1githubgithub.com/AnotherSec/CVE-2026-41940★ 1githubgithub.com/0xabdoulaye/CPANEL-CVE-2026-41940★ 1githubgithub.com/Unfold-Security/CVE-2026-41940-Detection★ 1githubgithub.com/keithbennedict/CVE-2026-41940-Linux★ 0githubgithub.com/3tternp/CVE-2026-41940---cPanel-WHM-check★ 0githubgithub.com/acuciureanu/cpanel2shell-honeypot★ 0githubgithub.com/SreejaPuthan/cpanel-control-plane-exposure-check★ 0githubgithub.com/oguz-kagan-akar/CVE-2026-41940-analysis★ 0githubgithub.com/yanchenyu360/CVE-2026-41940-Security-Patch★ 0githubgithub.com/t4xo/CVE-2026-41940★ 0githubgithub.com/MrAriaNet/cPanel-Fix★ 0githubgithub.com/dennisec/CVE-2026-41940★ 0githubgithub.com/yasouxken/cve-2026-41940-PoC★ 0githubgithub.com/limo57640-crypto/cpanel-cve-41940-detector★ 0githubgithub.com/xxconi/CVE-2026-41940★ 0githubgithub.com/yurahshell/CVE-2026-41940★ 0githubgithub.com/rdyprtmx/poc-cve-2026-41940★ 0githubgithub.com/Underh0st/CPanel-Audit-Remediation-Tool★ 0githubgithub.com/zwanski2019/cPanelSniper★ 0githubgithub.com/itsismarcos/CVE-2026-41940★ 0githubgithub.com/ZildanZ/CVE-2026-41940★ 0githubgithub.com/dann3xplo1t/Cpanel★ 0githubgithub.com/devtint/CVE-2026-41940★ 0githubgithub.com/vineet7800/cpanel-malware-cleaner-cve-2026★ 0githubgithub.com/Rosemary1337/CVE-2026-41940★ 0githubgithub.com/imbas007/POC_CVE-2026-41940★ 0githubgithub.com/tfawnies/CVE-2026-41940-next★ 0githubgithub.com/iSee857/cPanel-WHM-CVE-2026-41940-AuthBypass★ 0githubgithub.com/Richflexpix/cpanel-pwn★ 0githubgithub.com/ryhnmhrdka/CVE-2026-41940★ 0githubgithub.com/unteikyou/CVE-2026-41940-AuthBypass-Detector★ 0githubgithub.com/0dev1337/cpanelscanner★ 0githubgithub.com/sercanokur/CVE-2026-41940-cPanel-WHM-Verification-Tool★ 0githubgithub.com/OhmGun/whmxploit---CVE-2026-41940★ 0githubgithub.com/branixsolutions/Security-CVE-2026-41940-cPanel-WHM-WP2★ 0githubgithub.com/ngksiva/cpanel-forensics★ 0githubgithub.com/Xrzmodz444/cve-2026-41940-PoC-Linux★ 0githubgithub.com/hitechcloud-vietnam/cve-2026-41940-PoC★ 0githubgithub.com/ylerpeek/CVE-2026-41940-PoC-3★ 0githubgithub.com/anach-ai/CVE-2026-41940★ 0githubgithub.com/Wesuiliye/CVE-2026-41940★ 0githubgithub.com/asdasddqwdq29-a11y/CVE-2026-41940★ 0vulncheckvulncheck.com/xdb/ab4932c439e3no verificadovulncheckvulncheck.com/xdb/79c0a2242820no verificadovulncheckvulncheck.com/xdb/c5929b7843f1no verificadovulncheckvulncheck.com/xdb/0760f33ef8feno verificadocve_referencegithub.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.pyno verificadovulncheckvulncheck.com/xdb/638c0484e819no verificadovulncheckvulncheck.com/xdb/ee294b4613eano verificadovulncheckvulncheck.com/xdb/16d5ab800560no verificadovulncheckvulncheck.com/xdb/822ef40705bcno verificadovulncheckvulncheck.com/xdb/de3f8fdecbe3no verificadovulncheckvulncheck.com/xdb/e2b42e6bcdd2no verificadovulncheckvulncheck.com/xdb/99c465956adano verificadovulncheckvulncheck.com/xdb/7ac5e6841496no verificadovulncheckvulncheck.com/xdb/2d059995e5c8no verificadovulncheckvulncheck.com/xdb/61b014f224a5no verificadovulncheckvulncheck.com/xdb/915262813837no verificadovulncheckvulncheck.com/xdb/698f92dd7818no verificadovulncheckvulncheck.com/xdb/c8e41f933cc2no verificadovulncheckvulncheck.com/xdb/b5918a180562no verificadovulncheckvulncheck.com/xdb/9c08a4d28b74no verificadovulncheckvulncheck.com/xdb/8cd860ca73cdno verificadovulncheckvulncheck.com/xdb/7a76757220cano verificadovulncheckvulncheck.com/xdb/f9d342e4eca2no verificadovulncheckvulncheck.com/xdb/3b0962dac909no verificadovulncheckvulncheck.com/xdb/661bf0d571c6no verificadovulncheckvulncheck.com/xdb/f8cff31d8055no verificadovulncheckvulncheck.com/xdb/7f33a13eae8fno verificadovulncheckvulncheck.com/xdb/3e9a7043f1c8no verificadovulncheckvulncheck.com/xdb/6ccec66d3309no verificadovulncheckvulncheck.com/xdb/8667179e485cno verificadovulncheckvulncheck.com/xdb/a327d1cb48afno verificadovulncheckvulncheck.com/xdb/633f3f2da3d5no verificadovulncheckvulncheck.com/xdb/6553a2321f70no verificadovulncheckvulncheck.com/xdb/7dd127bc3b48no verificadovulncheckvulncheck.com/xdb/e157f5d69e1eno verificadovulncheckvulncheck.com/xdb/0701db1fa28dno verificadovulncheckvulncheck.com/xdb/448e559dab0bno verificadovulncheckvulncheck.com/xdb/b8f96da8a016no verificadovulncheckvulncheck.com/xdb/e3c91bcbf5d4no verificadovulncheckvulncheck.com/xdb/66cfb91c6e16no verificadovulncheckvulncheck.com/xdb/aca42fa8ca62no verificadovulncheckvulncheck.com/xdb/02ab4edb040bno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — WebPros cPanel
En el mismo producto, de las más peligrosas a las menos.
Referencias
https://docs.cpanel.net/release-notes/release-noteshttps://docs.wpsquared.com/changelogs/versions/changelog/#13617https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.pyhttps://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026https://www.bleepingcomputer.com/news/security/critrical-cpanel-flaw-mass-exploited-in-sorry-ransomware-attacks/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41940https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026https://www.vulncheck.com/advisories/cpanel-and-whm-authentication-bypass-via-login-flow