Two critical PHP security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have been disclosed. Both vulnerabilities have been rated CVSS 4.0: 9.2 (Critical), and successful exploitation may allow Remote Code Execution (RCE) on affected PHP installations. Affected Software: cPanel & WHM EasyApache 4 PHP packages. The security updates ... Read More »
cPanel has released security updates addressing an issue where File Manager could access symbolic links (symlinks) that are not accessible via SSH, potentially allowing users to access files they would not normally be able to view, depending on file permissions. Affected Versions This issue has been resolved in the following cPanel & WHM ... Read More »
A critical Linux kernel vulnerability, Januscape (CVE-2026-53359), has been disclosed affecting the Linux KVM/x86 memory management subsystem. This vulnerability may allow a malicious virtual machine to escape to the host, or on CloudLinux 8/9/10 systems where /dev/kvm is accessible, allow an unprivileged local user to crash the host or ... Read More »
A newly discovered Linux kernel vulnerability, identified as Fragnesia, affects systems running CloudLinux kernels. Current Status CloudLinux 8:A kernel patch is currently pending release. CloudLinux 9 & 10:Administrators may either: enable the AlmaLinux testing repository to obtain the patched kernel early, or wait for ... Read More »
