cPanel Pre-Auth Session Gen (CVE-2026-41940)

Aitor Fernández@DarkW0lf

•updated May 5, 2026•9•0•1,420

Detects the generation of pre-authentication session cookies via intentionally failed login attempts to the `login_only` endpoint. This detects the initial staging phase of the CVE-2026-41940 exploit chain.