cPanel WHM Authentication Bypass Zero-Day | MSSP Advisory

CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel and WHM that bypasses all login protections and grants attackers full administrative access to hosting control panels. Attackers have been exploiting this zero-day since late February, and a public proof-of-concept is now available making exploitation trivial.

Your clients running shared hosting, dedicated servers, or VPS environments with cPanel are sitting ducks for complete server takeover through their hosting control panels. If you manage hosting infrastructure for clients or use cPanel in your own lab environments, attackers can bypass every security control and gain root-level access to compromise your entire client base.

📬