Cpanel: community verdicts

1 notable / known-exploited Cpanel CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Cpanel CVE, see NVD ↗.

CVE-2026-41940CRIT 9.8KEVEPSS 98%
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.