Skip to content

Product

WebPros WHM vulnerabilities

1 published CVE affecting WebPros WHM, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
1

Latest WebPros WHM CVEs

Newest publication first

  1. CVE-2026-41940 WebPros cPanel and WHM Authentication Bypass via Login Flow

    Published
    CriticalCVSS 9.3 EPSS 98.5% CISA KEV added 2026-04-30 Ransomware Exploited in the wild Framework module

    cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.