CVE-2026-41940: cPanel & WHM Pre-Auth RCE - Two Write Paths, One Filter
CVE-2026-41940: a CRLF session-injection in cPanel & WHM that turns six unauthenticated HTTP requests into root SSH. Source-level walkthrough and audit.
watchtowr
1 article in this topic.
May 2026
1 article- 22 min read