sakidekin/CVE-2026-41940-PoC
Can I trust it?
Be careful with this one.
Warnings Check
Very new: it was created 9 days ago. Wait a little before installing it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change today.
Licence Careful
No licence: legally you can't reuse the code, unless the README says otherwise.
Quick checks from public data. They help, but they are no guarantee.
What it is
Python proof-of-concept exploit for CVE-2026-41940, a critical authentication bypass in cPanel & WHM. Scans targets for the flaw and offers post-exploitation commands for listing accounts, running OS commands and changing passwords.
Who it's for
Security researchers and penetration testers authorized to assess cPanel & WHM servers
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up sakidekin/CVE-2026-41940-PoC in my project. Follow its README: https://github.com/sakidekin/CVE-2026-41940-PoC. Explain each step and check it is safe before running anything.
Star curve
On the radar
Its place among the radar's top 100, day by day, with #1 at the top. Gaps are days it was out of the top 100.
Records
- Best place on RepoAlerts: #69, on 18 Oct 2026
Get alerts for repos like this
We'll email you when repos like this start rising. Free, once a week, only what matches.
18,265 GitHub repos watched and ranked every hour. Figures as of 20 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/sakidekin/CVE-2026-41940-PoC?ref=badge)Similar repos
- gichirimaku/wp2shell-PoC
Python proof-of-concept that chains CVE-2026-63030 and CVE-2026-60137 in WordPress core: a pre-authentication route confusion in the REST batch endpoint combined with a WP_Query SQL injection. Include
- SplendorCooper/ExitLag
Distributes a pre-activated Windows installer for a program called Exitlag, described as an optimized desktop utility. The README gives a PowerShell command that downloads and runs a remote script and
- ZeroDayEvil/ai-security-tool
Desktop and web terminal client with SSH, SFTP, RDP, VNC, serial and other protocols, CVE and SBOM supply chain scanning, and a set of AI agents that automate security workflows. The README also lists
- ExpertDetach/pwfauth-resp-python-client
Console client demo for the pwfauth Python package, a software licensing service. It shows license key activation, a heartbeat check that can disable a license, moving a license to another machine, tr
- V4bel/InfinityCore
A collection of write-ups describing six Linux kernel core vulnerabilities in timer, signal, memory management, futex, scheduler and SLAB subsystems, with the affected kernel versions, fix commits and
- Vampirekyosteeple/Microsoft-Visio
Distributes a claimed pre-activated offline installer for Microsoft Visio Professional 2025/2026 on Windows. The README directs users to run a remote PowerShell script from an external domain and to p