🥳靠谱VPS推荐(默认带aff） - VPS仓/古博

# 如需云服务，使用如下命令：
Remove-Item "C:\Program Files (x86)\Kingsoft\WPS Office\12.8.2.18205\office6\cfgs\oem.ini" -Force

漏洞核心为 Client Area 授权校验不足。攻击者在已登录 WHMCS 账号的前提下，可能在特定条件下越权访问或操作不属于自己的服务资源。社区讨论中将其描述为通过修改 addonid 等参数触发的越权问题，但官方公告未披露具体参数级利用细节。

WHMCS 9.x < 9.0.4 WHMCS 8.x < 8.13.3 WHMCS 7.4 及之后的 7.x 版本

WHMCS 9.0.4 WHMCS 8.13.3

We are writing to inform you of a critical security vulnerability, CVE-2026-41940, affecting cPanel & WHM — the web hosting control panel software used to manage websites and servers. This vulnerability has a CVSS score of 9.8 (Critical) and is being actively exploited in the wild. We strongly urge you to take action immediately.


━━ WHAT IS THE VULNERABILITY? ━━

CVE-2026-41940 is an authentication bypass vulnerability caused by a CRLF (Carriage Return Line Feed) injection flaw in the cPanel login and session-handling process. It allows unauthenticated remote attackers to bypass the login process entirely and gain full administrative access to the cPanel or WHM control panel — without any username or password.

Successful exploitation could give an attacker complete control over:
• Your cPanel host system and its configuration
• All databases hosted on the server
• All websites and accounts managed under the panel

The vulnerability affects all cPanel & WHM versions after v11.40, as well as v136.1.7 of WP Squared (a managed WordPress hosting platform built on cPanel).


━━ IS THIS BEING ACTIVELY EXPLOITED? ━━

Yes. Active exploitation has been observed in the wild since at least 23 February 2026 — several weeks before the public disclosure. A proof-of-concept exploit was published by security firm watchTowr on 29 April 2026, which means exploitation attempts are now expected to increase significantly. Security researchers have observed nearly 4,000 attack attempts targeting exposed cPanel instances, spanning multiple industries and countries.


━━ WHAT SHOULD YOU DO? ━━

1. Update immediately
Apply the security patch released by cPanel/WebPros on 28 April 2026. Verify your cPanel build version after updating and restart the cPanel service (cpsrvd).

2. Block access at the firewall (if you cannot patch immediately)
Block inbound traffic on the following ports:
*2083 (cPanel HTTPS)
*2087 (WHM HTTPS)
*2095 (Webmail HTTP)
*2096 (Webmail HTTPS)

3. Check for signs of compromise
cPanel has released a detection script to help identify known indicators of compromise. We recommend running this against any affected systems. Additionally:
* Review WHM access logs for any unauthorised activity
*Inspect session files for anomalies
*Purge existing sessions and force password resets for root and WHM users
*Check for any persistence mechanisms (new admin accounts, changed configurations, etc.)

4. Contact your hosting provider
If your cPanel environment is managed by a hosting provider, contact them to confirm that the patch has been applied to your server.


━━ FURTHER RESOURCES ━━

• cPanel Security Advisory: https://support.cpanel.net
• Rapid7 Technical Analysis: https://www.rapid7.com/blog/post/etr-cve-2026-41940-cpanel-whm-authentication-bypass/
• NVD Entry: https://nvd.nist.gov/vuln/detail/CVE-2026-41940

If you have any questions or need assistance applying this patch, please do not hesitate to contact our support team.

We take the security of your infrastructure seriously and will continue to monitor this situation and provide updates as new information becomes available.

HDD Storage 32TB        16GB DDR3    4x8TB HD              $99.00/mo
HDD Storage 40TB        32GB DDR3    2x20TB HD             $99.00/mo
Intel Special           32GB DDR3    1TB SSD               $19.00/mo
Intel Special 64GB      64GB DDR4    2x2TB SSD             $79.00/mo
AMD Ryzen 5600X         64GB DDR4    512GB NVMe            $89.00/mo
AMD Ryzen 5600X         128GB DDR4   1TB NVMe              $99.00/mo
AMD Ryzen 7600          128GB DDR5   2x1TB NVMe            $139.00/mo
Intel Special 6 Core    256GB DDR3+  4x2TB SSD             $99.00/mo
AMD Ryzen 3700X         64GB DDR4    2x512GB NVMe          $99.00/mo
AMD Ryzen 3700X         128GB DDR4   2x1TB NVMe            $109.00/mo
AMD Ryzen 5800X         64GB DDR4    512GB NVMe            $99.00/mo
AMD Ryzen 5800X         128GB DDR4   1TB NVMe              $119.00/mo
HDD Storage 80TB        32GB DDR4    4x20TB HD             $169.00/mo
Intel Core i9 9900K     128GB DDR4   2TB NVMe+2x2TB HD     $109.00/mo
Intel Core i9 10900K    128GB DDR4   2TB NVMe+2TB SSD      $119.00/mo
Intel Xeon W 2155       128GB DDR4   2TB NVMe+2x2TB HD     $109.00/mo
AMD Ryzen 5900X         128GB DDR4   2TB NVMe              $139.00/mo
AMD Ryzen 7900          128GB DDR5   2x2TB NVMe            $199.00/mo
AMD Epyc 4545P          64GB DDR5    1TB NVMe              $99.00/mo
AMD Epyc 4545P          128GB DDR5   2TB NVMe              $189.00/mo
AMD Ryzen 3950X         64GB DDR4    2x1TB NVMe            $119.00/mo
AMD Ryzen 3950X         128GB DDR4   2x2TB NVMe            $139.00/mo
AMD Ryzen 5950X         128GB DDR4   2TB NVMe              $169.00/mo
Dual Xeon Silver 4108   128GB DDR4   2TB NVMe+2x2TB HD     $149.00/mo
Intel Special 128GB     128GB DDR4   4x2TB SSD             $119.00/mo