Veille CVE

Jeudi 30 avril 2026

1 CVE

  1. CVE-2026-41940 – Non évaluée Exploitée Rançongiciel

    WebPros cPanel & WHM and WP2 (WordPress Squared)

    WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability — WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.