CVE-2026-41940Published

WebPros cPanel and WHM Authentication Bypass via Login Flow

cve-program · CVE-2026-41940

Published

cPanel

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "affected",
                    "vendor": "WebPros",
                    "product": "cPanel",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "11.40.0.0",
                            "versionType": "custom",
                            "lessThan": "11.86.0.41"
                        },
                        {
                            "status": "affected",
                            "version": "11.88.0.0",
                            "versionType": "custom",
                            "lessThan": "11.94.0.28"
                        },
                        {
                            "status": "affected",
                            "version": "11.96.0.0",
                            "versionType": "custom",
                            "lessThan": "11.102.0.39"
                        },
                        {
                            "status": "affected",
                            "version": "11.104.0.0",
                            "versionType": "custom",
                            "lessThan": "11.110.0.97"
                        },
                        {
                            "status": "affected",
                            "version": "11.112.0.0",
                            "versionType": "custom",
                            "lessThan": "11.118.0.63"
                        },
                        {
                            "status": "affected",
                            "version": "11.120.0.0",
                            "versionType": "custom",
                            "lessThan": "11.124.0.35"
                        },
                        {
                            "status": "affected",
                            "version": "11.126.0.0",
                            "versionType": "custom",
                            "lessThan": "11.126.0.54"
                        },
                        {
                            "status": "affected",
                            "version": "11.128.0.0",
                            "versionType": "custom",
                            "lessThan": "11.130.0.19"
                        },
                        {
                            "status": "affected",
                            "version": "11.132.0.0",
                            "versionType": "custom",
                            "lessThan": "11.132.0.29"
                        },
                        {
                            "status": "affected",
                            "version": "11.134.0.0",
                            "versionType": "custom",
                            "lessThan": "11.134.0.20"
                        },
                        {
                            "status": "affected",
                            "version": "11.136.0.0",
                            "versionType": "custom",
                            "lessThan": "11.136.0.5"
                        }
                    ]
                }

WP Squared

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "vendor": "WebPros",
                    "product": "WP Squared",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom",
                            "lessThan": "11.136.1.7"
                        }
                    ]
                }

WHM

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "affected",
                    "vendor": "WebPros",
                    "product": "WHM",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "11.40.0.0",
                            "versionType": "custom",
                            "lessThan": "11.86.0.41"
                        },
                        {
                            "status": "affected",
                            "version": "11.88.0.0",
                            "versionType": "custom",
                            "lessThan": "11.94.0.28"
                        },
                        {
                            "status": "affected",
                            "version": "11.96.0.0",
                            "versionType": "custom",
                            "lessThan": "11.102.0.39"
                        },
                        {
                            "status": "affected",
                            "version": "11.104.0.0",
                            "versionType": "custom",
                            "lessThan": "11.110.0.97"
                        },
                        {
                            "status": "affected",
                            "version": "11.112.0.0",
                            "versionType": "custom",
                            "lessThan": "11.118.0.63"
                        },
                        {
                            "status": "affected",
                            "version": "11.120.0.0",
                            "versionType": "custom",
                            "lessThan": "11.124.0.35"
                        },
                        {
                            "status": "affected",
                            "version": "11.126.0.0",
                            "versionType": "custom",
                            "lessThan": "11.126.0.54"
                        },
                        {
                            "status": "affected",
                            "version": "11.128.0.0",
                            "versionType": "custom",
                            "lessThan": "11.130.0.19"
                        },
                        {
                            "status": "affected",
                            "version": "11.132.0.0",
                            "versionType": "custom",
                            "lessThan": "11.132.0.29"
                        },
                        {
                            "status": "affected",
                            "version": "11.134.0.0",
                            "versionType": "custom",
                            "lessThan": "11.134.0.20"
                        },
                        {
                            "status": "affected",
                            "version": "11.136.0.0",
                            "versionType": "custom",
                            "lessThan": "11.136.0.5"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON