{"revision":"a4f820cc912f4331a5c5a57686202f78","evidence":{"cve":"CVE-2026-41940","kev":{"cve":"CVE-2026-41940","product":"cPanel & WHM and WP2 (WordPress Squared)","name":"WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-04-30","dueDate":"2026-05-03","knownRansomwareUse":true,"shortDescription":"WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.","vendor":"WebPros","isMicrosoft":false,"products":[],"advisoryUrl":"https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41940","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41940"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"381eda2e2e40688d25cca671"}}