WHM — PoC Archivehttps://poc.intelseclab.com/tags/whm/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000LiteSpeed cPanel/WHM Plugin Symlink Privilege Escalation — CVE-2026-54420https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-54420-litespeed-symlink-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-54420-litespeed-symlink-lpe/High severity (CVSS 8.5) — network · CVE-2026-54420. Status: PoC. Affects: LiteSpeed cPanel Plugin / WHM Plugin. Tags: litespeed, cpanel, whm, symlink, cwe-61, cloudlinux, cagefs, shared-hosting, ftp, privilege-escalation.networkHighlitespeedcpanelwhmsymlinkcwe-61cloudlinuxcagefsshared-hostingftpprivilege-escalationcPanel & WHM Authentication Bypass via Session-File CRLF Injection (CVE-2026-41940)https://poc.intelseclab.com/pocs/web/2026-05-16_cpanel-whm-auth-bypass-crlf-session-injection/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-16_cpanel-whm-auth-bypass-crlf-session-injection/Critical severity (CVSS 10) — web · CVE-2026-41940. Status: Weaponized. Affects: cPanel & WHM. Tags: auth-bypass, CRLF-injection, session-poisoning, cPanel, WHM, unauthenticated.webCriticalauth-bypassCRLF-injectionsession-poisoningcPanelWHMunauthenticated