Authenticated webmail bypass via inconsistent username handling

Authentication bypass in cPanel before 82.0.18 allows remote authenticated users to bypass webmail login via a crafted username. The webmail authentication path handles username values inconsistently, but cPanel has not disclosed the affected components or exact parsing difference. A valid low-privilege account is required; successful exploitation reaches resources protected by the targeted login, while the precise actions remain undisclosed.