sakidekin/CVE-2026-41940-PoC
cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation
Older snapshot: check the original source for current information.
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header — no credentials required. CVE-2026-41940, in general terms, is exploited through a breakdown in how the system handles authentication sessions in cPanel/WHM. The attack typically begins with a normal request to the login interface, where the application prematurely initializes a session before fully validating user credentials. Because of improper handling of session-related input, certain crafted or unexpected input structures can alter how…
Read the full README ↗ · Preview checked 2026-10-28T17:19:59.055Z
Inside the original README — Document outline
- CVE-2026-41940
- Description
- How it works
- Affected versions
- Installation(Windows/Mac OS)🔄
- How to use
- Basic scan:
- Post-Expoit actions
- Pipelines
- WHM Shell mode
- All shell Commands
- CLI Reference
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Documentation belongs to its respective authors. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation
Repository facts
- Owner
- sakidekin
- Primary language
- Python
- Stars
- 302
- Forks
- 87
- Open issues + pull requests
- 0
- License
- Not reported — inspect the license file
- Archived
- No
- Default branch
- main
- Created
- 2026-10-11T07:54:18.000Z
- Last push
- 2026-10-17T16:48:15.000Z
Topics and intended use
Owner-supplied topics: cpanel, cpanel-whm, cve-2026-41940, cve-2026-41940-poc
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-10-18T12:10:07.336Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.
Related repositories
EbookFoundation/free-programming-books
donnemartin/system-design-primer