CVE-2026-41940: WebPros cPanel and WHM Authentication Bypass via Login Flow
Published Apr 29, 2026
·Updated
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
Affected Software
21 affected components
Cpanel cPanel & WHM>11.40
WebPros cPanel & WHM and WP2 (WordPress Squared)
Cpanel Cpanel>=11.40<86.0.41
Cpanel Cpanel>=88.0.0<110.0.97
Cpanel Cpanel>=112.0.0<118.0.63
Cpanel Cpanel>=120.0.0<124.0.35
Cpanel Cpanel>=126.0.1<126.0.54
Cpanel Cpanel>=128.0.0<130.0.19
Cpanel Cpanel>=132.0.0<132.0.29
Cpanel Cpanel>=134.0.0<134.0.20
Cpanel Cpanel>=136.0.0<136.0.5
Cpanel WHM>=11.40<86.0.41
Cpanel WHM>=88.0.0<110.0.97
Cpanel WHM>=112.0.0<118.0.63
Cpanel WHM>=120.0.0<124.0.35
Cpanel WHM>=126.0.1<126.0.54
Cpanel WHM>=128.0.0<130.0.19
Cpanel WHM>=132.0.0<132.0.29
Cpanel WHM>=134.0.0<134.0.20
Cpanel WHM>=136.0.0<136.0.5
Cpanel Wp Squared Wordpress<136.1.7
Remediation
Information
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Event History
Apr 29, 2026
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
DescriptionSeverityWeakness
News Published
via BleepingComputer·03:51 PM
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Apr 30, 2026
Known Exploited
via CISA·12:00 AM
Known Ransomware
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
News Published
via The Register·10:14 AM
News Published
via The Register·10:17 AM
News Published
via BleepingComputer·11:40 AM
News Published
via BleepingComputer·11:41 AM
May 1, 2026
News Published
via The Register·01:10 PM
May 2, 2026
News Published
via BleepingComputer·09:54 PM
May 4, 2026
News Published
via Dark Reading·07:14 PM
May 12, 2026
News Published
via Dark Reading·08:13 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-41940?
CVE-2026-41940 is considered a critical vulnerability due to its ability to allow unauthorized access via authentication bypass.
2
How do I fix CVE-2026-41940?
To fix CVE-2026-41940, upgrade cPanel & WHM to version 11.110.0.98 or later.
3
Which versions of cPanel & WHM are affected by CVE-2026-41940?
CVE-2026-41940 affects cPanel & WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5.
4
Can CVE-2026-41940 be exploited remotely?
Yes, CVE-2026-41940 can be exploited by unauthenticated remote attackers.
5
What components are involved in CVE-2026-41940?
CVE-2026-41940 involves the login flow of cPanel and WHM.