On this page
Atomicorp WAF Rule 377364
Rule Summary
- Rule ID: 377364
- Status: Active
- Alert message: Atomicorp.com WAF Rules - Login Detection: Cpanel WHM root Login succeeded
- Observed CWEs: CWE-306 (1)
- Revision: 2
- Rule severity: Notice (5)
- Phase: 5 (logging)
- Rule action: pass
- Public tags: no_ar
- Logging: auditlog
Description
This rule detects behavior identified by its current alert as “Login Detection: Cpanel WHM root Login succeeded”. It evaluates during the logging phase and records the match without a disruptive action.
Selected Related CVEs
This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.
| CVE | Vulnerability | Product | CVSS | Severity |
|---|---|---|---|---|
| CVE-2026-41940 | cPanel & WHM - Authentication Bypass via Session-File CRLF Injection | cpanel | 9.3 (v4.0) | Critical |
Observed CWEs
These CWEs are recorded on published CVEs in the selected observations associated with this rule. They are observational relationships, not a claim that the rule universally blocks every vulnerability assigned to a CWE.
| CWE | Related Published CVEs |
|---|---|
| CWE-306 | CVE-2026-41940 |