linko-iheb/cve-2026-41940-scannerPassive, read-only vulnerability scanner for detecting CVE-2026-41940 in cPanel & WHM. Performs version-based fingerprinting, generates compliance-ready JSON reports, and provides remediation guidance without exploitation.
Enterprise-grade vulnerability detection for cPanel & WHM infrastructure
Features • Installation • Usage • Legal • Examples
LinkSecure is an ethical, read-only vulnerability scanner designed for system administrators and security teams to detect CVE-2026-41940 in cPanel & WHM environments.
Unlike exploit tools, LinkSecure performs passive fingerprinting only — no malicious payloads, no authentication bypass, no system modification. It simply tells you if your infrastructure is vulnerable so you can patch before attackers exploit.
| Feature | LinkSecure | Traditional Exploit Tools |
|---|---|---|
| Detection Method | Passive fingerprinting | Active exploitation |
| Risk Level | Zero - Read only | High - System modification |
| Legal Compliance | ✅ Fully compliant | ⚠️ Authorization required |
| Audit Ready | ✅ JSON reports | ❌ No audit trail |
| SysAdmin Focused | ✅ Yes | ❌ No |
Severity: 🔴 CRITICAL (CVSS 10.0)
Impact: Unauthenticated remote root access
Affected Versions: cPanel & WHM < 11.110.0.97, < 11.118.0.63, < 11.126.0.54, < 11.132.0.29, < 11.134.0.20, < 11.136.0.5
The vulnerability exists in cPanel's session handling mechanism:
saveSession() calls filter_sessiondata() after writing the session file✅ Checks cPanel version from server banners
✅ Identifies if version falls within vulnerable range
✅ Generates compliance-ready reports
✅ Provides remediation guidance
❌ Exploit or verify the vulnerability
❌ Inject malicious CRLF payloads
❌ Bypass authentication
❌ Access or modify system data
❌ Perform any post-exploitation actions
# Clone the repository
git clone https://github.com/link0z/linksecure.git
cd linksecure
# No dependencies required! Uses only Python standard library