Skip to content
#

session-forgery

Star

Here is 1 public repository matching this topic...

rfxn / cpanel-sessionscribe

Sponsor
Star 12

Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.

incident-response cpanel waf forensics modsecurity vulnerability-detection whm security-tools crlf-injection session-forgery ioc-scanner cve-2026-41940 sessionscribe
  • Updated May 21, 2026
  • Shell

Improve this page

Add a description, image, and links to the session-forgery topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the session-forgery topic, visit your repo's landing page and select "manage topics."

Learn more