10th Sept 2026
cPanel Security Update: EmailTrack Vulnerability Can Lead to Root Access (CVE-2026-67401)
A new cPanel security update requires administrator attention
cPanel has released patched builds for CVE-2026-67401, a vulnerability in the EmailTrack functionality that affects all supported versions of cPanel & WHM.
An authenticated cPanel account holder with mail-related privileges could exploit the issue to create arbitrary files on the ...
4th Sept 2026
Important Security Updates: WHMCS and ConfigServer Firewall (CSF)
We would like to bring your attention to two important security updates affecting WHMCS and ConfigServer Firewall (CSF).
If you operate either product, we strongly recommend reviewing your installed version and applying the available updates as soon as possible.
1. WHMCS Security Update : 9.0.8 and 8.13.7
WHMCS has released version 9.0.8 and ...
2nd Sept 2026
Vulnerability CVE-2026-67397: Arbitrary code execution as root in Plesk
A critical security vulnerability affecting Plesk has been identified. Hotfix is now available.
Vulnerability in Plesk allows privilege escalation to root - CVE-2026-67397
Situation: Can allow a Plesk user to execute arbitrary code as root on the server.Impact: A Plesk user without elevated privileges could gain full control of the ...
28th Aug 2026
Vulnerability in cPanel’s domain parking functionality - CVE-2026-65643
A critical security vulnerability affecting cPanel & WHM has been identified. Patched versions are now available.An authenticated cPanel account holder who is able to add parked or addon domains can create arbitrary files on the server.
Impact:Successful exploitation leads to code execution as the root user, giving an attacker full ...
