CVE-2026-41940 — 脆弱性インテリジェンス

WebPros — cPanel & WHM and WP2 (WordPress Squared)

公表日: 2026-04-29T15:10:37.899Z

CVSS

9.3

CISA KEV

既知の悪用を確認

情報源の原文（翻訳ではありません）

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

情報源

• WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-41940