CVE-2026-41940 1

Vulnerability (CVE)

CVE-2026-41940: Web Pros cPanel & WHM and WP2 (Word Press Squared) Missing Authentication for Critical Function Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 30, 2026

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Vulnerabilities & Patching