sakidekin / CVE-2026-41940-PoC

# CVE-2026-41940
> **⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited.**
## Description
A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header — no credentials required.
## How it works
CVE-2026-41940, in general terms, is exploited through a breakdown in how the system handles authentication sessions in cPanel/WHM. The attack typically begins with a normal request to the login interface, where the application prematurely initializes a session before fully validating user credentials. Because of improper handling of session-related input, certain crafted or unexpected input structures can alter how session data is stored or interpreted by the server.
## Affected versions
| Version | Vulnerable | Patched |
|--------|-----------|---------|
| 110.x | ≤ 11.110.0.96 | **11.110.0.97** |
| 118.x | ≤ 11.118.0.62 | **11.118.0.63** |
| 126.x | ≤ 11.126.0.53 | **11.126.0.54** |
| 132.x | ≤ 11.132.0.28 | **11.132.0.29** |
| 134.x | ≤ 11.134.0.19 | **11.134.0.20** |
| 136.x | ≤ 11.136.0.4 | **11.136.0.5** |
---
## Installation(Windows/Mac OS)🔄
 [code] 
# How to use
The tool expects a target domain to be specified.
Single target mode:
 [code] 
You can also scan from the `target.txt` file(create it):
 [code] 
## Basic scan:
Available commands:
 [code] 
# Post-Expoit actions
 [code] 
# Pipelines
 [code] 
# WHM Shell mode
After a succesful executuion, you can open an interactive WHM shell:
 [code] 
### All shell Commands
| Command | Description |
|---------|-------------|
| `id` | Show User ID |
| `hostname` | Get server hostname |
| `accounts` | List all user accounts |
| `info` | Load, disk, MySQL host, version |
| `cat ` | Read file content |
| `exec ` | Execute OS command |
| `newadmin ` | Create backdoor WHM admin |
| `passwd ` | Change root password |
| `l [path]` | List directory |
| `help` | Show all commands |
| `exit` | Exit shell mode |
---
# CLI Reference
 [code] 
# Disclaimer 
**⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited.**