THREAT OPS › Threat News › The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
<img alt="The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)" src="https://storage.ghost.io/c/a0/dc/a0dcbbe4-0ae7-4d7e-90f7-ebbc3a0f5a84/content/images/2026/04/Group-8730--2-.png" /><p>Hello! Yes, it's all a disaster again! </p><p>Let's get this party started:</p><figure class="kg-card kg-video-card kg-width-regular">
MITRE ATT&CK techniques
- Control PanelT1218.002
Indicators of compromise
- 1bd3d4bf5ecbf83b660789ab0f3198famd5
- 4d257abc371539dfebdf7d3a3e64de0bmd5
- CVE-2026-41940cve
- https://storage.ghost.io/c/a0/dc/a0dcbbe4-0ae7-4d7e-90f7-ebbc3a0f5a84/content/media/2026/04/whm-demo.mp4url
- https://watchtowr.com/demo/?ref=labs.watchtowr.comurl
- https://support.cpanel.net/hc/en-us/articles/40073787579671-Critical-Vulnerability-with-cPanel-WHM-Login-Authentication?ref=labs.watchtowr.comurl
- https://storage.ghost.io/c/a0/dc/a0dcbbe4-0ae7-4d7e-90f7-ebbc3a0f5a84/content/media/2026/04/whm-demo-1.mp4url
- 11.110.0.97ipv4
- 11.110.0.96ipv4
- 11.118.0.63ipv4
- 11.118.0.61ipv4
- 11.126.0.54ipv4
- 11.126.0.53ipv4
- 11.132.0.29ipv4
- 11.132.0.27ipv4
- 11.134.0.20ipv4
- 11.134.0.19ipv4
- 11.136.0.5ipv4
- 11.136.0.4ipv4