CVE-2026-41940

CVSS

—

EPSS

0.985 (99.9th percentile)

CISA KEV

Added 2026-04-30, due 2026-05-03

Exploitation

No report

Public exploits

76 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 95watchTowr Labs29 Apr, 17:19

  The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)

  Hello! Yes, it's all a disaster again! Let's get this party started: No comments today, so imagine this: We wrote something that we find very funny, Nobody else gets it, But everyone humors us Just like a typical watchTowr Labs blog introduction. As with all watchTowr

  ↗labs.watchtowr.com/the-internet-is-falling-down…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:31poc publishedpoc-in-github
2. 24 Sept, 12:16poc publishedpoc-in-github
3. 24 Sept, 11:53poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev